NVD公開月 2026-06
8,001 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2009-10007 | Deferred | 未確認 | CWE-384 | Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the s |
| CVE-2016-20062 | Deferred | 未確認 | CWE-89 | Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through t |
| CVE-2016-20063 | Deferred | 未確認 | CWE-89 | Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries by injecting malicious code through the messa |
| CVE-2016-20064 | Deferred | 未確認 | CWE-98 | WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting an unescaped parameter in the include fun |
| CVE-2016-20065 | Deferred | 未確認 | CWE-89 | Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod |
| CVE-2016-20066 | Deferred | 未確認 | CWE-79 | WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. A |
| CVE-2016-20067 | Deferred | 未確認 | CWE-352 | WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can c |
| CVE-2016-20068 | Deferred | 未確認 | CWE-89 | WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries b |
| CVE-2016-20069 | Deferred | 未確認 | CWE-89 | WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize the calendar parameter |
| CVE-2016-20070 | Deferred | 未確認 | CWE-79 | WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options |
| CVE-2016-20071 | Deferred | 未確認 | CWE-89 | The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries b |
| CVE-2016-20072 | Deferred | 未確認 | CWE-89 | BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod |
| CVE-2016-20073 | Deferred | 未確認 | CWE-89 | Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co |
| CVE-2016-20074 | Deferred | 未確認 | CWE-352 | WordPress Lazy Content Slider Plugin 3.4 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms. |
| CVE-2016-20075 | Deferred | 未確認 | CWE-863 | WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users with contributor, editor, author, or administrator roles to |
| CVE-2016-20076 | Deferred | 未確認 | CWE-22 | WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrary files and download sensitive files by manipulating the del |
| CVE-2016-20077 | Deferred | 未確認 | CWE-98 | WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input val |
| CVE-2016-20078 | Deferred | 未確認 | CWE-98 | WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. A |
| CVE-2016-20079 | Deferred | 未確認 | CWE-98 | WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the gatew |
| CVE-2016-20080 | Deferred | 未確認 | CWE-98 | WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files |
| CVE-2016-20081 | Deferred | 未確認 | CWE-22 | WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the file_path |
| CVE-2016-20082 | Deferred | 未確認 | CWE-98 | WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the action parameter. Attacke |
| CVE-2016-20083 | Deferred | 未確認 | CWE-352 | WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attac |
| CVE-2016-20084 | Deferred | 未確認 | CWE-79 | WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject per |
| CVE-2016-20085 | Awaiting Analysis | 未確認 | CWE-428 | Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a malicious executable |
| CVE-2016-20086 | Deferred | 未確認 | CWE-428 | Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer services that allows local attackers to escalate privileges. Atta |
| CVE-2016-20087 | Deferred | 未確認 | CWE-428 | Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated privileges by exploiting the service binary p |
| CVE-2016-20088 | Deferred | 未確認 | CWE-428 | Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a |
| CVE-2016-20089 | Deferred | 未確認 | CWE-428 | Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation |
| CVE-2016-20090 | Deferred | 未確認 | CWE-428 | Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM priv |
| CVE-2016-20091 | Deferred | 未確認 | CWE-428 | Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by inserting malicious executables in the servic |
| CVE-2016-20092 | Deferred | 未確認 | CWE-428 | NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows local users to execute arbitrary code with SYSTEM privileges. |
| CVE-2016-20093 | Deferred | 未確認 | CWE-428 | Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to e |
| CVE-2016-20094 | Analyzed | 未確認 | CWE-428 | AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation. Attac |
| CVE-2016-20095 | Deferred | 未確認 | CWE-428 | Matrix42 Remote Control Host 3.20.0031 contains an unquoted service path vulnerability in the FastViewerRemoteService and FastViewerRemoteProxy services that allows local users to |
| CVE-2017-20240 | Deferred | 未確認 | CWE-208 | Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess |
| CVE-2017-20243 | Deferred | 未確認 | CWE-89 | WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by in |
| CVE-2017-20244 | Deferred | 未確認 | CWE-89 | Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read arbitrary database information by exploiting an unescap |
| CVE-2017-20245 | Deferred | 未確認 | CWE-89 | Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'id |
| CVE-2017-20246 | Deferred | 未確認 | CWE-89 | KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET paramet |
| CVE-2017-20247 | Deferred | 未確認 | CWE-89 | WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t |
| CVE-2017-20248 | Deferred | 未確認 | CWE-22 | Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers |
| CVE-2017-20249 | Deferred | 未確認 | CWE-89 | Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the alb |
| CVE-2017-20250 | Deferred | 未確認 | CWE-22 | Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can s |
| CVE-2017-20251 | Deferred | 未確認 | CWE-94 | WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malici |
| CVE-2017-20252 | Analyzed | 未確認 | CWE-89 | Joomla NextGen Editor 2.1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the plname parameter. Attackers |
| CVE-2017-20253 | Analyzed | 未確認 | CWE-89 | Joomla! Component My Projects 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through |
| CVE-2017-20254 | Analyzed | 未確認 | CWE-89 | Joomla! Component User Bench 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through |
| CVE-2017-20255 | Analyzed | 未確認 | CWE-89 | Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the |
| CVE-2017-20256 | Analyzed | 未確認 | CWE-89 | Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through |
| CVE-2017-20257 | Analyzed | 未確認 | CWE-89 | Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_ques |
| CVE-2017-20258 | Analyzed | 未確認 | CWE-89 | Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicio |
| CVE-2017-20259 | Analyzed | 未確認 | CWE-89 | Joomla OSDownloads 1.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id p |
| CVE-2017-20260 | Analyzed | 未確認 | CWE-89 | Joomla! Component Price Alert 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu |
| CVE-2017-20261 | Analyzed | 未確認 | CWE-89 | Joomla! Component Bargain Product VM3 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code |
| CVE-2017-20262 | Analyzed | 未確認 | CWE-89 | Joomla! Component Ajax Quiz 1.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t |
| CVE-2017-20263 | Analyzed | 未確認 | CWE-89 | Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co |
| CVE-2017-20264 | Analyzed | 未確認 | CWE-89 | Joomla! Component Sponsor Wall 8.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug |
| CVE-2017-20265 | Analyzed | 未確認 | CWE-89 | Joomla! Component Flip Wall 8.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t |
| CVE-2017-20266 | Analyzed | 未確認 | CWE-89 | Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the |
| CVE-2017-20267 | Analyzed | 未確認 | CWE-89 | Joomla! Component Calendar Planner 1.0.1 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the category_id parameter. Att |
| CVE-2017-20268 | Analyzed | 未確認 | CWE-89 | Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code |
| CVE-2017-20269 | Analyzed | 未確認 | CWE-89 | Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers c |
| CVE-2017-20270 | Analyzed | 未確認 | CWE-89 | Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t |
| CVE-2017-20271 | Analyzed | 未確認 | CWE-89 | Joomla StreetGuessr Game 1.1.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th |
| CVE-2017-20272 | Analyzed | 未確認 | CWE-89 | Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th |
| CVE-2017-20273 | Analyzed | 未確認 | CWE-89 | Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c |
| CVE-2017-20274 | Analyzed | 未確認 | CWE-89 | Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the |
| CVE-2017-20275 | Analyzed | 未確認 | CWE-89 | Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug |
| CVE-2017-20276 | Analyzed | 未確認 | CWE-89 | Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the |
| CVE-2017-20277 | Analyzed | 未確認 | CWE-89 | Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers can inject SQL code through POST |
| CVE-2017-20278 | Analyzed | 未確認 | CWE-89 | Joomla Component JoomRecipe 1.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat |
| CVE-2017-20279 | Analyzed | 未確認 | CWE-89 | Joomla Payage 2.05 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the aid parameter. Att |
| CVE-2017-20280 | Analyzed | 未確認 | CWE-89 | Joomla Component Myportfolio 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the pi |
| CVE-2017-20281 | Analyzed | 未確認 | CWE-89 | Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the |
| CVE-2017-20282 | Analyzed | 未確認 | CWE-89 | Joomla! Component jCart for OpenCart 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through |
| CVE-2018-25427 | Deferred | 未確認 | CWE-121 | Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain |
| CVE-2018-25428 | Deferred | 未確認 | CWE-89 | Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the tRecIdListe p |
| CVE-2018-25429 | Deferred | 未確認 | CWE-89 | Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zProIdPro param |
| CVE-2018-25430 | Deferred | 未確認 | CWE-89 | Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eGeqIdEquipe pa |
| CVE-2018-25431 | Deferred | 未確認 | CWE-89 | No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate database quer |
| CVE-2018-25432 | Deferred | 未確認 | CWE-120 | Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a |
| CVE-2018-25433 | Deferred | 未確認 | CWE-89 | Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code |
| CVE-2018-25434 | Deferred | 未確認 | CWE-89 | WP AutoSuggest 0.24 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wpas_keys |
| CVE-2018-25435 | Deferred | 未確認 | CWE-352 | ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests. Attacker |
| CVE-2018-25436 | Deferred | 未確認 | CWE-434 | WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files by expl |
| CVE-2018-25437 | Deferred | 未確認 | CWE-306 | WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the do |
| CVE-2019-25716 | Analyzed | 未確認 | CWE-15 | Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malfo |
| CVE-2019-25717 | Analyzed | 未確認 | CWE-538 | Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a |
| CVE-2019-25718 | Analyzed | 未確認 | CWE-451 | Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a sp |
| CVE-2019-25719 | Awaiting Analysis | 未確認 | CWE-924 | Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0.3, and lower contain network message handling vulnerabiliti |
| CVE-2019-25720 | Awaiting Analysis | 未確認 | CWE-1286 | Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated att |
| CVE-2019-25721 | Awaiting Analysis | 未確認 | CWE-400 | Dräger Infinity M300 patient worn monitors with software version VG2.3.1 and earlier contain a network-based denial of service vulnerability that allows network-adjacent attackers |
| CVE-2019-25722 | Awaiting Analysis | 未確認 | CWE-798 | Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability that |
| CVE-2019-25723 | Awaiting Analysis | 未確認 | CWE-1286 | Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers to cause a denial of service by sending spe |
| CVE-2019-25724 | Awaiting Analysis | 未確認 | CWE-400 | Dräger Infinity M300 patient worn monitors with software version VG2.x and earlier contain a network-based denial of service vulnerability that allows attackers with access to the |
| CVE-2019-25726 | Deferred | 未確認 | CWE-89 | All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t |
| CVE-2019-25727 | Deferred | 未確認 | CWE-22 | WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path p |
| CVE-2019-25728 | Deferred | 未確認 | CWE-89 | Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by manipulating the ck_config cookie parameter. At |
| CVE-2019-25729 | Deferred | 未確認 | CWE-352 | PDF Signer 3.0 contains a server-side template injection vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP commands through the CSRF-TO |
| CVE-2019-25730 | Deferred | 未確認 | CWE-89 | Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id paramet |
| CVE-2019-25731 | Deferred | 未確認 | CWE-79 | Zuz Music 2.1 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious JavaScript by submitting crafted contact form data. |
| CVE-2019-25732 | Deferred | 未確認 | CWE-89 | PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search p |
| CVE-2019-25733 | Deferred | 未確認 | CWE-120 | NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. At |
| CVE-2019-25734 | Deferred | 未確認 | CWE-22 | Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that allows unauthenticated attackers to include arbitrary files by |
| CVE-2019-25735 | Deferred | 未確認 | CWE-120 | AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively l |
| CVE-2019-25736 | Deferred | 未確認 | CWE-120 | LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the Host IP field. At |
| CVE-2019-25737 | Deferred | 未確認 | CWE-79 | Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the chat input field. Attac |
| CVE-2019-25738 | Deferred | 未確認 | CWE-306 | WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_aja |
| CVE-2019-25739 | Deferred | 未確認 | CWE-79 | GigToDo 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript and HTML code through the proposal descripti |
| CVE-2019-25740 | Deferred | 未確認 | CWE-22 | Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers |
| CVE-2019-25741 | Deferred | 未確認 | CWE-120 | Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to exe |
| CVE-2019-25742 | Deferred | 未確認 | CWE-79 | WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through the Address in |
| CVE-2019-25743 | Deferred | 未確認 | CWE-79 | WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting script tags in |
| CVE-2019-25744 | Deferred | 未確認 | CWE-79 | WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags |
| CVE-2019-25745 | Deferred | 未確認 | CWE-89 | WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting |
| CVE-2019-25746 | Deferred | 未確認 | CWE-89 | WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code throu |
| CVE-2019-25747 | Deferred | 未確認 | CWE-428 | Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attackers to escalate privileges by placing malicious executables |
| CVE-2019-25748 | Analyzed | 未確認 | CWE-89 | Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th |
| CVE-2019-25749 | Analyzed | 未確認 | CWE-89 | Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the gue |
| CVE-2019-25750 | Analyzed | 未確認 | CWE-89 | Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malici |
| CVE-2019-25751 | Analyzed | 未確認 | CWE-89 | Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co |
| CVE-2019-25752 | Analyzed | 未確認 | CWE-89 | Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co |
| CVE-2019-25753 | Analyzed | 未確認 | CWE-89 | Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the lat |
| CVE-2019-25754 | Analyzed | 未確認 | CWE-89 | Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug |
| CVE-2019-25755 | Analyzed | 未確認 | CWE-89 | Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t |
| CVE-2019-25756 | Analyzed | 未確認 | CWE-89 | Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through |
| CVE-2019-25757 | Analyzed | 未確認 | CWE-89 | Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vproduct |
| CVE-2019-25758 | Analyzed | 未確認 | CWE-434 | Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authenticated attackers to upload arbitrary PHP files by submitting malicious files thr |
| CVE-2019-25759 | Analyzed | 未確認 | CWE-89 | Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p |
| CVE-2019-25760 | Analyzed | 未確認 | CWE-98 | Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by supplying base64-encoded file paths |
| CVE-2019-25761 | Analyzed | 未確認 | CWE-89 | Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the |
| CVE-2019-25762 | Analyzed | 未確認 | CWE-359 | Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiting the project |
| CVE-2019-25763 | Deferred | 未確認 | CWE-288 | WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by exploiting the social medi |
| CVE-2020-2521 | Rejected | 未確認 | Rejected reason: This candidate was issued in error. | |
| CVE-2020-25900 | Deferred | 未確認 | CWE-359 | HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a data |
| CVE-2020-37248 | Deferred | 未確認 | CWE-348 | OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and e |
| CVE-2020-37250 | Awaiting Analysis | 未確認 | CWE-428 | TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code with system privileg |
| CVE-2020-37251 | Deferred | 未確認 | CWE-428 | RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. Attackers can place ma |
| CVE-2020-37252 | Deferred | 未確認 | CWE-428 | Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious co |
| CVE-2020-37253 | Deferred | 未確認 | CWE-428 | Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local attackers to escalate privileges. Attackers can place malicious e |
| CVE-2020-37254 | Awaiting Analysis | 未確認 | CWE-428 | Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a maliciou |
| CVE-2020-37255 | Deferred | 未確認 | CWE-288 | WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST |
| CVE-2020-37256 | Analyzed | 未確認 | CWE-79 | Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged users with page editing capabilities can |
| CVE-2020-9695 | Analyzed | 未確認 | CWE-787 | Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitra |
| CVE-2020-9711 | Analyzed | 未確認 | CWE-125 | Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure |
| CVE-2020-9713 | Analyzed | 未確認 | CWE-125 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier are affected by an out-of-bounds read vulne |
| CVE-2021-4478 | Awaiting Analysis | 未確認 | CWE-787 | Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger |
| CVE-2021-4479 | Awaiting Analysis | 未確認 | CWE-1286 | Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sending specificall |
| CVE-2021-4480 | Awaiting Analysis | 未確認 | CWE-732 | Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute |
| CVE-2021-4481 | Awaiting Analysis | 未確認 | CWE-732 | Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute |
| CVE-2021-46747 | Awaiting Analysis | 未確認 | CWE-1220 | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Netw |
| CVE-2021-47982 | Deferred | 未確認 | CWE-79 | WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the preset p |
| CVE-2021-47983 | Deferred | 未確認 | CWE-79 | WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Acce |
| CVE-2021-47984 | Deferred | 未確認 | CWE-79 | WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted |
| CVE-2021-47985 | Deferred | 未確認 | CWE-428 | Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a mal |
| CVE-2021-47986 | Analyzed | 未確認 | CWE-494 | Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers |
| CVE-2021-47987 | Deferred | 未確認 | CWE-494 | Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unreviewed personal fork of |
| CVE-2022-26758 | Analyzed | 未確認 | CWE-362 | A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed |
| CVE-2022-31114 | Deferred | 未確認 | CWE-79 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Versions pr |
| CVE-2022-42479 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TemplateHouse Soledad allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Soledad: from n/a through 8.2.5. |
| CVE-2022-44630 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH WooCommerce Product Sli |
| CVE-2022-45813 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced |
| CVE-2022-47150 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery. This issue affects WooCommerce Conversion Tracking: fr |
| CVE-2022-48575 | Analyzed | 未確認 | CWE-287 | A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4. |
| CVE-2022-49036 | Analyzed | 未確認 | CWE-829 | An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 a |
| CVE-2022-49042 | Analyzed | 未確認 | CWE-829 | An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute a |
| CVE-2022-4991 | Awaiting Analysis | 未確認 | Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows. Tychon contains a privileg | |
| CVE-2022-4992 | Awaiting Analysis | 未確認 | CWE-345 | Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors versions VG4.1.1, VG4.0.3, and lower (with VG4.2 partially affected) contain a network message handl |
| CVE-2022-50953 | Deferred | 未確認 | CWE-22 | WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injectio |
| CVE-2022-50971 | Analyzed | 未確認 | CWE-428 | Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into t |
| CVE-2022-50972 | Deferred | 未確認 | CWE-94 | WooCommerce 7.1.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary PHP code by injecting shell commands through the product-type parameter. |
| CVE-2023-20540 | Awaiting Analysis | 未確認 | CWE-208 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary messa |
| CVE-2023-20572 | Awaiting Analysis | 未確認 | CWE-208 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an |
| CVE-2023-25969 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue aff |
| CVE-2023-29146 | Deferred | 未確認 | CWE-190 | The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data if it exceeds 4GB. This leads to an integ |
| CVE-2023-32959 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MetroStore: fro |
| CVE-2023-33854 | Analyzed | 未確認 | CWE-294 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and ma |
| CVE-2023-33999 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: fro |
| CVE-2023-37524 | Analyzed | 未確認 | CWE-1104 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reached end-of-life and no |
| CVE-2023-40200 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Essential Plugin WP Logo Showcase Responsive Slider and Carousel allows Exploiting Incorrectly Configured Access C |
| CVE-2023-43686 | Deferred | 未確認 | CWE-755 | An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large number of Firefox preference files can cause the parser to ignore other browser confi |
| CVE-2023-43688 | Deferred | 未確認 | CWE-122 | An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). There is a Heap buffer overflow in various buffer encryption utilities. |
| CVE-2023-45795 | Deferred | 未確認 | CWE-79 | A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full con |
| CVE-2023-45796 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthe |
| CVE-2023-52951 | Analyzed | 未確認 | CWE-319 | A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential. |
| CVE-2023-54350 | Deferred | 未確認 | CWE-306 | WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary PH |
| CVE-2023-54351 | Deferred | 未確認 | CWE-79 | WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functio |
| CVE-2023-54352 | Deferred | 未確認 | CWE-306 | WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme dire |
| CVE-2023-54353 | Deferred | 未確認 | CWE-428 | Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placing malicious executabl |
| CVE-2023-54357 | Analyzed | 未確認 | CWE-203 | Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData f |
| CVE-2023-54365 | Analyzed | 未確認 | CWE-400, CWE-770 | Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CV |
| CVE-2023-5502 | Awaiting Analysis | 未確認 | CWE-287 | On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplican |
| CVE-2024-14036 | Awaiting Analysis | 未確認 | CWE-400 | Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-adjacent attackers to trigger high CPU load by sending speci |
| CVE-2024-21944 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or contro |
| CVE-2024-22447 | Analyzed | 未確認 | CWE-427 | Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloa |
| CVE-2024-22451 | Analyzed | 未確認 | CWE-427 | Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through p |
| CVE-2024-23581 | Analyzed | 未確認 | CWE-347 | The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious software or an unrecognized application. |
| CVE-2024-24709 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Shareaholic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shareaholic: from n/a through 9.7.11 |
| CVE-2024-24769 | Deferred | 未確認 | CWE-400 | vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, users can reset their MFA token via API routes that send them an email. Currently |
| CVE-2024-24909 | Awaiting Analysis | 未確認 | CWE-77 | Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially |
| CVE-2024-27890 | Awaiting Analysis | 未確認 | CWE-306 | Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being |
| CVE-2024-27891 | Awaiting Analysis | 未確認 | CWE-284 | On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. T |
| CVE-2024-27892 | Awaiting Analysis | 未確認 | CWE-306 | Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being |
| CVE-2024-27928 | Deferred | 未確認 | CWE-308 | vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, if an attacker hacks into a vantage6 user's email account, they can 1) reset the |
| CVE-2024-30476 | Awaiting Analysis | 未確認 | CWE-79 | PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager. A remote authenticated low-privileged malicious actor could potentially exploit this vuln |
| CVE-2024-31435 | Deferred | 未確認 | CWE-862 | : Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Social Media |
| CVE-2024-32110 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This issue affects WpEvently: from n/a through 4.1.2. |
| CVE-2024-32729 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue aff |
| CVE-2024-32949 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Prince Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Integrate Google D |
| CVE-2024-33685 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Jegstudio Startupzy startupzy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Startupzy: from n/ |
| CVE-2024-33909 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Avirtum iPages Flipbook allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects iPages Flipbook: from n/ |
| CVE-2024-34810 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in Extend Themes Skyline WP allows Cross Site Request Forgery. This issue affects Skyline WP: from n/a through 1.0.10. |
| CVE-2024-35648 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in Andy Moyle Emergency Password Reset allows Cross Site Request Forgery. This issue affects Emergency Password Reset: from n/a thr |
| CVE-2024-35690 | Deferred | 未確認 | CWE-201 | Insertion of sensitive information into sent data vulnerability in MarketingFire Widget Options allows Retrieve Embedded Sensitive Data. This issue affects Widget Options: from n/ |
| CVE-2024-37210 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5. |
| CVE-2024-37496 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: from |
| CVE-2024-38487 | Awaiting Analysis | 未確認 | CWE-269 | api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions. |
| CVE-2024-39575 | Awaiting Analysis | 未確認 | CWE-256 | update_disk_psu_baseline.sh requires password in plain text |
| CVE-2024-40646 | Analyzed | 未確認 | CWE-22 | Vertex is a management tool for PT (Private Tracker) users to manage streaming and watching videos. Versions prior to commit fbde301b97986d5913fc4bc95f5445750d282e11 are vulnerable |
| CVE-2024-42206 | Awaiting Analysis | 未確認 | HCL iReflection Third party vulnerable and outdated components issue was detected in the web application | |
| CVE-2024-45636 | Analyzed | 未確認 | CWE-256, CWE-522 | IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user. |
| CVE-2024-47263 | Analyzed | 未確認 | CWE-22 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 all |
| CVE-2024-47273 | Analyzed | 未確認 | CWE-22 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036 allows remot |
| CVE-2024-47477 | Analyzed | 未確認 | CWE-295 | Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulner |
| CVE-2024-49269 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in my flatonica <= 0.0.8 versions. |
| CVE-2024-51454 | Analyzed | 未確認 | CWE-644 | IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fix 004 is vulnerable to HTTP header injec |
| CVE-2024-52011 | Deferred | 未確認 | CWE-77, CWE-88 | launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launc |
| CVE-2024-52488 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions. |
| CVE-2024-54178 | Analyzed | 未確認 | CWE-770 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new |
| CVE-2024-56120 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2024-56121 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2024-56122 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2024-56123 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2024-58348 | Deferred | 未確認 | CWE-434 | WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.p |
| CVE-2024-58349 | Deferred | 未確認 | CWE-434 | WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validat |
| CVE-2024-58350 | Analyzed | 未確認 | CWE-758 | Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchi |
| CVE-2024-58351 | Deferred | 未確認 | CWE-94 | Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported in both the frontend web integration and the b |
| CVE-2024-6858 | Awaiting Analysis | 未確認 | CWE-1287 | In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN. |
| CVE-2025-0824 | Deferred | 未確認 | CWE-347 | Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28. This issue affects Hitachi Virtual Storage Platform One Block 23, 24, |
| CVE-2025-10237 | Awaiting Analysis | 未確認 | CWE-327 | During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform a |
| CVE-2025-10238 | Awaiting Analysis | 未確認 | CWE-787 | During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to ex |
| CVE-2025-10262 | Awaiting Analysis | 未確認 | CWE-134 | Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authentica |
| CVE-2025-10263 | Awaiting Analysis | 未確認 | CWE-266, CWE-362 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex |
| CVE-2025-10268 | Deferred | 未確認 | The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the | |
| CVE-2025-10560 | Deferred | 未確認 | CWE-798 | Worksnaps before version 1.6.20260201 contains hardcoded cloud credentials and related secret material in the Worksnaps client application binaries. The exposed credentials include |
| CVE-2025-11694 | Awaiting Analysis | 未確認 | CWE-354 | A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to |
| CVE-2025-11919 | Awaiting Analysis | 未確認 | The default JVM can access files and directories under `/tmp/` including the `$TemporaryDirectory` of other users on the same cloud instance (`/tmp/UserTemporaryFiles/`). The `-in | |
| CVE-2025-12530 | Modified | 未確認 | CWE-319 | IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through Patch 1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the |
| CVE-2025-12656 | Deferred | 未確認 | CWE-73 | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the delet |
| CVE-2025-12694 | Analyzed | 未確認 | CWE-250 | A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Clie |
| CVE-2025-13036 | Awaiting Analysis | 未確認 | CWE-362 | An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid auth |
| CVE-2025-13162 | Awaiting Analysis | 未確認 | CWE-427 | Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master. This issue affects Control Builder A: through 1.4/4; 800xA for Advant Master: |
| CVE-2025-14098 | Deferred | 未確認 | CWE-190, CWE-787 | Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code o |
| CVE-2025-14272 | Awaiting Analysis | 未確認 | CWE-862 | A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged ope |
| CVE-2025-14771 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. |
| CVE-2025-14772 | Analyzed | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. |
| CVE-2025-14773 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. |
| CVE-2025-14774 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. |
| CVE-2025-15546 | Deferred | 未確認 | CWE-362 | The Iptanus File Upload WordPress plugin before 5.1.7 does not implement proper file handling when the duplicatepolicy setting is configured to "maintain both." Due to a Time-of-Ch |
| CVE-2025-15619 | Awaiting Analysis | 未確認 | CWE-284, CWE-319 | HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to view data in a single specific scenario. |
| CVE-2025-15641 | Awaiting Analysis | 未確認 | CWE-782 | Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the cust |
| CVE-2025-15642 | Awaiting Analysis | 未確認 | CWE-276 | Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Pro |
| CVE-2025-15653 | Awaiting Analysis | 未確認 | CWE-668 | Dräger Zeus Infinity Empowered (Zeus IE) and Zeus RS C500 anesthesia workstations contain a local security vulnerability that allows unauthorized individuals with physical access t |
| CVE-2025-15654 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a t |
| CVE-2025-15655 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection. This issue affects School Ma |
| CVE-2025-15656 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Management: from n/a through 93.2.0. |
| CVE-2025-15657 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in School Management <= 93.1.0 versions. |
| CVE-2025-15658 | Deferred | 未確認 | CWE-79 | Administrator Cross Site Scripting (XSS) in WP Emmet <= 0.3.4 versions. |
| CVE-2025-15659 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Elizaibots <= 1.0.2 versions. |
| CVE-2025-15661 | Analyzed | 未確認 | CWE-125 | libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp_symlink() function in src/sftp.c that allows a malicious SSH server o |
| CVE-2025-22424 | Modified | 未確認 | CWE-20 | In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional e |
| CVE-2025-22426 | Modified | 未確認 | CWE-284 | In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escalation of privilege wit |
| CVE-2025-24165 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause un |
| CVE-2025-24268 | Analyzed | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive us |
| CVE-2025-24284 | Analyzed | 未確認 | CWE-693 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox. |
| CVE-2025-24815 | Analyzed | 未確認 | CWE-434 | Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to |
| CVE-2025-24816 | Analyzed | 未確認 | CWE-284 | Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacke |
| CVE-2025-26240 | Deferred | 未確認 | CWE-120 | In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files. |
| CVE-2025-26418 | Modified | 未確認 | CWE-862 | In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permi |
| CVE-2025-2669 | Analyzed | 未確認 | CWE-295 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive info |
| CVE-2025-27511 | Analyzed | 未確認 | CWE-502, CWE-74 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perfo |
| CVE-2025-2902 | Deferred | 未確認 | CWE-862 | Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, |
| CVE-2025-30431 | Analyzed | 未確認 | CWE-693 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private in |
| CVE-2025-30459 | Analyzed | 未確認 | CWE-359 | A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data. |
| CVE-2025-31013 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Folo allows Reflected XSS. This issue affects Themify Folo: from n/a |
| CVE-2025-31272 | Analyzed | 未確認 | CWE-269 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass launch constraint protections and execute malicious code with |
| CVE-2025-32348 | Modified | 未確認 | CWE-863 | In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with no additional executi |
| CVE-2025-32392 | Deferred | 未確認 | CWE-400 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, AutoGPT's LoopVideoBLock allows users to |
| CVE-2025-32394 | Deferred | 未確認 | CWE-405, CWE-770 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in AITextSu |
| CVE-2025-32422 | Deferred | 未確認 | CWE-400 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, `StepThroughItemsBlock` can iterate all |
| CVE-2025-32423 | Deferred | 未確認 | CWE-770 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there is a DoS vulnerability in ExtractT |
| CVE-2025-32424 | Deferred | 未確認 | CWE-400 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, ScreenshotWebPageBlock will store the ca |
| CVE-2025-32436 | Deferred | 未確認 | CWE-400 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, `AddAudioToVideoBlock` will download and |
| CVE-2025-32437 | Deferred | 未確認 | CWE-400 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, `MediaDurationBlock` will download and s |
| CVE-2025-32748 | Analyzed | 未確認 | CWE-601 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this |
| CVE-2025-33128 | Analyzed | 未確認 | CWE-79 | IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is vulnerable to cross-site scripting. This vulnerability allows an aut |
| CVE-2025-36319 | Analyzed | 未確認 | CWE-770 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper alloca |
| CVE-2025-36320 | Analyzed | 未確認 | CWE-79 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript |
| CVE-2025-36321 | Analyzed | 未確認 | CWE-80 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed i |
| CVE-2025-36323 | Analyzed | 未確認 | CWE-79 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code i |
| CVE-2025-36324 | Analyzed | 未確認 | CWE-918 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 s vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests |
| CVE-2025-36327 | Analyzed | 未確認 | CWE-602 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to bypass security controls and perform unauthorized actions due to client-side enforceme |
| CVE-2025-36328 | Analyzed | 未確認 | CWE-209 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the br |
| CVE-2025-36333 | Analyzed | 未確認 | CWE-841 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow. |
| CVE-2025-36336 | Analyzed | 未確認 | CWE-319 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle technique |
| CVE-2025-36359 | Analyzed | 未確認 | CWE-613 | IBM DevOps Automation 1.0.1 and IBM DevOps Loop 1.0.2 does not invalidate session IDs after expiration which could allow an authenticated user to impersonate another user on the sy |
| CVE-2025-36372 | Analyzed | 未確認 | CWE-538 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user fro |
| CVE-2025-40808 | Awaiting Analysis | 未確認 | CWE-434 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 ( |
| CVE-2025-41259 | Awaiting Analysis | 未確認 | CWE-367 | SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrus |
| CVE-2025-43278 | Analyzed | 未確認 | CWE-61 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data. |
| CVE-2025-43339 | Analyzed | 未確認 | CWE-284 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data. |
| CVE-2025-46293 | Analyzed | 未確認 | CWE-59 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data. |
| CVE-2025-46308 | Analyzed | 未確認 | CWE-284 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user |
| CVE-2025-46313 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. |
| CVE-2025-46315 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data. |
| CVE-2025-46638 | Awaiting Analysis | 未確認 | CWE-770 | Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, le |
| CVE-2025-48570 | Analyzed | 未確認 | CWE-441 | In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to local escalation of p |
| CVE-2025-48571 | Analyzed | 未確認 | CWE-693 | In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information discl |
| CVE-2025-48595 | Analyzed | 掲載 | CWE-190 | In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution p |
| CVE-2025-48616 | Analyzed | 未確認 | In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local | |
| CVE-2025-48617 | Analyzed | 未確認 | CWE-862 | In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of privilege with no add |
| CVE-2025-48640 | Analyzed | 未確認 | CWE-862 | In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote (proximal/adjacent) escalation of p |
| CVE-2025-48643 | Analyzed | 未確認 | CWE-20 | In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privil |
| CVE-2025-48648 | Analyzed | 未確認 | CWE-400 | In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execut |
| CVE-2025-48649 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation of privilege with no a |
| CVE-2025-48652 | Analyzed | 未確認 | CWE-693 | In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local escalation of privilege |
| CVE-2025-49403 | Deferred | 未確認 | CWE-98 | Unauthenticated Arbitrary File Download in Premium Age Verification / Restriction for WordPress <= 3.0.2 versions. |
| CVE-2025-4994 | Deferred | 未確認 | CWE-305 | The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass auth |
| CVE-2025-5085 | Deferred | 未確認 | CWE-79 | The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole_link’ parameter in all versions up to, and including, 1.31 due to insufficient in |
| CVE-2025-5088 | Awaiting Analysis | 未確認 | CWE-269 | An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to t |
| CVE-2025-5089 | Awaiting Analysis | 未確認 | CWE-20 | In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from the connected CVX server. Similarly, the CVX server is not re |
| CVE-2025-5090 | Awaiting Analysis | 未確認 | CWE-20 | CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior |
| CVE-2025-52292 | Modified | 未確認 | CWE-121 | A stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. |
| CVE-2025-52293 | Modified | 未確認 | CWE-400 | A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplyin |
| CVE-2025-52465 | Analyzed | 未確認 | CWE-73 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated adm |
| CVE-2025-52606 | Analyzed | 未確認 | CWE-209 | HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected |
| CVE-2025-52608 | Analyzed | 未確認 | CWE-614 | HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and Same |
| CVE-2025-52609 | Analyzed | 未確認 | CWE-693 | HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern we |
| CVE-2025-52611 | Analyzed | 未確認 | CWE-209 | HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to an undefined property being accessed in the application's Ja |
| CVE-2025-52612 | Analyzed | 未確認 | CWE-1236 | HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanita |
| CVE-2025-52759 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UnboundStudio Accordion FAQ allows Reflected XSS. This issue affects Accordio |
| CVE-2025-52766 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Printeers Printeers Print & Ship allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Printeers Print |
| CVE-2025-53114 | Deferred | 未確認 | CWE-400 | CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that |
| CVE-2025-53209 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue affects Masteriyo LMS PRO: from n/a through 2.20.0. |
| CVE-2025-53302 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Anton Shevchuk Constructor allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Constructor: from n/a through |
| CVE-2025-53345 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThimPress Thim Core thim-core.This issue affects Thim Core: from n/a through 2.3.3. |
| CVE-2025-53346 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThimPress Thim Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Thim Core: from n/a through |
| CVE-2025-53440 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. Thi |
| CVE-2025-53648 | Analyzed | 未確認 | CWE-89 | SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, whic |
| CVE-2025-54509 | Awaiting Analysis | 未確認 | CWE-1262 | Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure |
| CVE-2025-55017 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.6, from 1.0.0 |
| CVE-2025-55639 | Analyzed | 未確認 | CWE-476 | GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the gf_isom_add_track_kind() function at isomedia/isom_write.c. This vulnerability allows attackers to caus |
| CVE-2025-55641 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference in the gf_isom_copy_sample_info function (isomedia/isom_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a |
| CVE-2025-55642 | Analyzed | 未確認 | CWE-369 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the avidmx_process function (isomedia/isom_write.c). |
| CVE-2025-55643 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference in the TrackWriter handling component (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafte |
| CVE-2025-55644 | Analyzed | 未確認 | CWE-416 | A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted |
| CVE-2025-55645 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 |
| CVE-2025-55647 | Analyzed | 未確認 | CWE-190 | An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 f |
| CVE-2025-55648 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow in the gf_opus_parse_packet_header function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying |
| CVE-2025-55649 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a craft |
| CVE-2025-55650 | Analyzed | 未確認 | CWE-416 | A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted |
| CVE-2025-55651 | Modified | 未確認 | CWE-476 | A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying |
| CVE-2025-55652 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow in the gf_isom_vp_config_new function (isomedia/avc_ext.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP |
| CVE-2025-55657 | Modified | 未確認 | CWE-476 | A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a craft |
| CVE-2025-55658 | Analyzed | 未確認 | CWE-1077 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). bThis vulnerability allows attackers t |
| CVE-2025-55659 | Modified | 未確認 | CWE-476 | A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted |
| CVE-2025-55660 | Analyzed | 未確認 | CWE-121 | A stack overflow in the gf_opus_read_length function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 |
| CVE-2025-55661 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. |
| CVE-2025-55663 | Analyzed | 未確認 | CWE-476 | A segmentation violation in the Track_SetStreamDescriptor function (isomedia/track.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafte |
| CVE-2025-55664 | Deferred | 未確認 | CWE-122 | A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 |
| CVE-2025-56814 | Deferred | 未確認 | CWE-77 | A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code via embedding shell metacharacters. |
| CVE-2025-58024 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local File Inclusion |
| CVE-2025-58175 | Analyzed | 未確認 | CWE-20, CWE-611, CWE-918 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may |
| CVE-2025-58468 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hij |
| CVE-2025-58705 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This i |
| CVE-2025-58707 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion. This iss |
| CVE-2025-58897 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion. Thi |
| CVE-2025-58924 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Geya <= 1.15 versions. |
| CVE-2025-58952 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Neuronet < 1.14.0 versions. |
| CVE-2025-58953 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Joly <= 1.22.0 versions. |
| CVE-2025-58954 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions. |
| CVE-2025-59133 | Deferred | 未確認 | CWE-639 | Custom role Insecure Direct Object References (IDOR) in Projectopia <= 5.1.25.2 versions. |
| CVE-2025-59174 | Analyzed | 未確認 | CWE-228 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degrad |
| CVE-2025-59382 | Awaiting Analysis | 未確認 | CWE-472 | QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version: |
| CVE-2025-59554 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Advanced Ads – Tracking < 3.0.7 versions. |
| CVE-2025-59560 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Sonaar <= 4.27.4 versions. |
| CVE-2025-59563 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions. |
| CVE-2025-59601 | Analyzed | 未確認 | CWE-1230 | Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration. |
| CVE-2025-59604 | Analyzed | 未確認 | CWE-476 | Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. |
| CVE-2025-59605 | Analyzed | 未確認 | CWE-787 | Memory Corruption when processing device identifier strings that exceed the expected maximum length. |
| CVE-2025-59606 | Analyzed | 未確認 | CWE-476 | Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization. |
| CVE-2025-59609 | Analyzed | 未確認 | CWE-126 | Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
| CVE-2025-59610 | Analyzed | 未確認 | CWE-367 | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
| CVE-2025-59611 | Analyzed | 未確認 | CWE-787 | Memory corruption in diagnostic services due to absence of input validation |
| CVE-2025-59612 | Analyzed | 未確認 | CWE-121 | Memory corruption in windows drivers while sending incorrect trusted application request |
| CVE-2025-59613 | Analyzed | 未確認 | CWE-121 | Memory Corruption when output buffer size is smaller than input buffer size during data copying operation. |
| CVE-2025-59614 | Analyzed | 未確認 | CWE-787 | Memory Corruption when sending random number generator command with insufficient output buffer size. |
| CVE-2025-59868 | Analyzed | 未確認 | CWE-532 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt |
| CVE-2025-59872 | Analyzed | 未確認 | CWE-209, CWE-434 | HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, If the server is configured to execute code, then it may be possible to obtain command execution on the se |
| CVE-2025-59874 | Awaiting Analysis | 未確認 | CWE-1027 | HCL Hive Telco Observability is affected by a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives |
| CVE-2025-60085 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Learnify <= 1.15.0 versions. |
| CVE-2025-60175 | Deferred | 未確認 | CWE-918 | Administrator Server Side Request Forgery (SSRF) in PopAd <= 1.0.4 versions. |
| CVE-2025-60205 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1. |
| CVE-2025-60218 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions. |
| CVE-2025-60223 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions. |
| CVE-2025-60229 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0. |
| CVE-2025-60230 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9. |
| CVE-2025-60231 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1. |
| CVE-2025-60236 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5. |
| CVE-2025-60464 | Analyzed | 未確認 | CWE-416 | A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via |
| CVE-2025-60465 | Analyzed | 未確認 | CWE-416 | A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via s |
| CVE-2025-60466 | Analyzed | 未確認 | CWE-416 | A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via |
| CVE-2025-60467 | Analyzed | 未確認 | CWE-416 | A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service |
| CVE-2025-60468 | Analyzed | 未確認 | CWE-122 | GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service (local). The com |
| CVE-2025-60471 | Analyzed | 未確認 | CWE-416 | A use-after-free in the gf_filter_pid_reconfigure_task_discard function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Serv |
| CVE-2025-60473 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service |
| CVE-2025-60474 | Analyzed | 未確認 | CWE-121 | A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplyin |
| CVE-2025-60477 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Deni |
| CVE-2025-60481 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via |
| CVE-2025-60483 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denia |
| CVE-2025-60485 | Deferred | 未確認 | CWE-476 | A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) |
| CVE-2025-60486 | Deferred | 未確認 | CWE-416 | A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a c |
| CVE-2025-60495 | Deferred | 未確認 | CWE-476 | A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (Do |
| CVE-2025-61018 | Deferred | 未確認 | CWE-89 | An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61019 | Deferred | 未確認 | CWE-89 | An issue in the sqlo_key_part_best component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61020 | Deferred | 未確認 | CWE-89 | An issue in the sqlo_strip_in_join component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61021 | Deferred | 未確認 | CWE-89 | An issue in the sqlo_natural_join_cond component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61022 | Deferred | 未確認 | CWE-89 | An issue in the sqlo_tb_col_preds component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61023 | Deferred | 未確認 | CWE-89 | An issue in the st_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61024 | Deferred | 未確認 | CWE-89 | An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61025 | Deferred | 未確認 | CWE-400, CWE-89 | An issue in the sslr_qst_get component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61027 | Deferred | 未確認 | CWE-89 | An issue in the t_set_push component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61028 | Deferred | 未確認 | CWE-770, CWE-89 | An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-61029 | Deferred | 未確認 | CWE-89 | An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
| CVE-2025-62180 | Awaiting Analysis | 未確認 | CWE-639 | Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs |
| CVE-2025-62198 | Analyzed | 未確認 | CWE-80 | An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue. |
| CVE-2025-62338 | Awaiting Analysis | 未確認 | HCL BigFix Cloud Lifecycle Management is affected by lack of input validation. This low-level flaw allows unauthorized access and may lead to information exposure. | |
| CVE-2025-62340 | Analyzed | 未確認 | CWE-613 | HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sess |
| CVE-2025-6254 | Deferred | 未確認 | CWE-269 | The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() functio |
| CVE-2025-62821 | Analyzed | 未確認 | CWE-125 | Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes |
| CVE-2025-62850 | Modified | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote attacker gains an administrator account, they can then exploit |
| CVE-2025-62851 | Modified | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the c |
| CVE-2025-62858 | Analyzed | 未確認 | CWE-121 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the v |
| CVE-2025-63041 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions. |
| CVE-2025-63078 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions. |
| CVE-2025-63079 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Live Copy Paste for Elementor <= 1.5.3 versions. |
| CVE-2025-64105 | Deferred | 未確認 | CWE-639 | FOSSBilling is a billing and client management system that automates invoicing, payments, and communication for online service businesses. Versions 0.6.21 through 0.7.2 are vulnera |
| CVE-2025-64152 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.6, from 2.0.0 |
| CVE-2025-64215 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects MasterStudy LMS Pro: |
| CVE-2025-64390 | Awaiting Analysis | 未確認 | CWE-367 | A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox can be escaped through a malformed JAR file |
| CVE-2025-64636 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions. |
| CVE-2025-64637 | Deferred | 未確認 | CWE-80 | Unauthenticated Content Injection in Auros Core <= 5.3.1 versions. |
| CVE-2025-64719 | Deferred | 未確認 | CWE-20 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service cond |
| CVE-2025-65640 | Deferred | 未確認 | CWE-79 | Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text f |
| CVE-2025-66123 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions. |
| CVE-2025-66273 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the |
| CVE-2025-66276 | Analyzed | 未確認 | QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250913 and later | |
| CVE-2025-66279 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the |
| CVE-2025-66280 | Analyzed | 未確認 | CWE-121, CWE-190 | An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can th |
| CVE-2025-66281 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a den |
| CVE-2025-66336 | Analyzed | 未確認 | CWE-89 | Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated into a SQL query, and the query is |
| CVE-2025-66389 | Analyzed | 未確認 | CWE-552 | GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration cou |
| CVE-2025-66391 | Awaiting Analysis | 未確認 | CWE-284 | In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to |
| CVE-2025-67446 | Deferred | 未確認 | CWE-384 | Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By m |
| CVE-2025-67447 | Deferred | 未確認 | CWE-78 | The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input |
| CVE-2025-67448 | Deferred | 未確認 | CWE-79 | The SMS module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to stored XSS. The application does not properly sanitize user input in SMS messages before storing |
| CVE-2025-67862 | Modified | 未確認 | CWE-1244 | An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS |
| CVE-2025-68045 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP E |
| CVE-2025-68049 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in bunny.net <= 2.3.6 versions. |
| CVE-2025-68052 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions. |
| CVE-2025-68063 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 versions. |
| CVE-2025-68064 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions. |
| CVE-2025-68074 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Image Carousel <= 1.0.0.41 versions. |
| CVE-2025-68075 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in BNE Testimonials <= 2.0.8 versions. |
| CVE-2025-68524 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Avante < 3.0.5 versions. |
| CVE-2025-68713 | Deferred | 未確認 | CWE-926 | An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. The vulnerability allows untrusted applications (with no perm |
| CVE-2025-68840 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in iRobots.txt SEO <= 1.1.2 versions. |
| CVE-2025-68851 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Okay Toolkit <= 2.3 versions. |
| CVE-2025-68872 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Eli's WordCents adSense Widget with Analytics <= 1.3.03.27 versions. |
| CVE-2025-68886 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in androThemes Cookiteer allows PHP Local File Inclusion. Thi |
| CVE-2025-69103 | Deferred | 未確認 | CWE-862 | Subscriber Arbitrary Content Deletion in Brikk <= 3.0.0 versions. |
| CVE-2025-69104 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Qreatix <= 1.9.4 versions. |
| CVE-2025-69105 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions. |
| CVE-2025-69106 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions. |
| CVE-2025-69107 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions. |
| CVE-2025-69108 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions. |
| CVE-2025-69109 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions. |
| CVE-2025-69110 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions. |
| CVE-2025-69111 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions. |
| CVE-2025-69112 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions. |
| CVE-2025-69113 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions. |
| CVE-2025-69114 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions. |
| CVE-2025-69115 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions. |
| CVE-2025-69116 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions. |
| CVE-2025-69117 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions. |
| CVE-2025-69118 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions. |
| CVE-2025-69119 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions. |
| CVE-2025-69120 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions. |
| CVE-2025-69121 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions. |
| CVE-2025-69122 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions. |
| CVE-2025-69123 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions. |
| CVE-2025-69124 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Especio <= 1.0 versions. |
| CVE-2025-69125 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions. |
| CVE-2025-69126 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions. |
| CVE-2025-69127 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions. |
| CVE-2025-69128 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through |
| CVE-2025-69129 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions. |
| CVE-2025-69130 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affec |
| CVE-2025-69131 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions. |
| CVE-2025-69135 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions. |
| CVE-2025-69136 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Wanium <= 1.9.8 versions. |
| CVE-2025-69137 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Genemy <= 1.6.6 versions. |
| CVE-2025-69138 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Genemy <= 1.6.6 versions. |
| CVE-2025-69139 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions. |
| CVE-2025-69140 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions. |
| CVE-2025-69141 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions. |
| CVE-2025-69142 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Abelle <= 1.22 versions. |
| CVE-2025-69143 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Mission <= 1.22 versions. |
| CVE-2025-69144 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Preservation <= 1.10 versions. |
| CVE-2025-69145 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Gat <= 1.16 versions. |
| CVE-2025-69146 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Dom <= 1.24 versions. |
| CVE-2025-69147 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Putter <= 1.17 versions. |
| CVE-2025-69148 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Quirky <= 1.23 versions. |
| CVE-2025-69149 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions. |
| CVE-2025-69150 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Medeus <= 1.14 versions. |
| CVE-2025-69151 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions. |
| CVE-2025-69157 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Gamic <= 1.15 versions. |
| CVE-2025-69158 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Granola <= 1.13 versions. |
| CVE-2025-69159 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Printo <= 1.11 versions. |
| CVE-2025-69160 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Gita <= 1.11 versions. |
| CVE-2025-69161 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Snowy <= 1.13 versions. |
| CVE-2025-69162 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Grecko <= 5.17 versions. |
| CVE-2025-69163 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in WineShop <= 3.17 versions. |
| CVE-2025-69164 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Skyward <= 1.10 versions. |
| CVE-2025-69165 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Choreo <= 1.6 versions. |
| CVE-2025-69166 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions. |
| CVE-2025-69167 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Eros <= 1.3 versions. |
| CVE-2025-69168 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Spike <= 1.2 versions. |
| CVE-2025-69170 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions. |
| CVE-2025-69171 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions. |
| CVE-2025-69172 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Resurs <= 1.3 versions. |
| CVE-2025-69173 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions. |
| CVE-2025-69174 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Etude <= 1.6 versions. |
| CVE-2025-69175 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions. |
| CVE-2025-69176 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in ITactics <= 1.0 versions. |
| CVE-2025-69177 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions. |
| CVE-2025-69178 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions. |
| CVE-2025-69179 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions. |
| CVE-2025-69189 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in EMV JobBank allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobBank: from n/a through 1.2.3. |
| CVE-2025-69332 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Bookify <= 1.1.1 versions. |
| CVE-2025-69369 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This |
| CVE-2025-69755 | Deferred | 未確認 | CWE-200, CWE-78 | An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the at_comma |
| CVE-2025-7002 | Deferred | 未確認 | CWE-125 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus en |
| CVE-2025-7003 | Deferred | 未確認 | CWE-125 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus en |
| CVE-2025-7004 | Deferred | 未確認 | CWE-787 | Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus p |
| CVE-2025-7005 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast An |
| CVE-2025-7006 | Deferred | 未確認 | CWE-590 | Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects |
| CVE-2025-7008 | Deferred | 未確認 | CWE-125 | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Service |
| CVE-2025-7009 | Deferred | 未確認 | CWE-125 | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus pr |
| CVE-2025-70099 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially cra |
| CVE-2025-7010 | Deferred | 未確認 | CWE-674 | Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process. This issue a |
| CVE-2025-70100 | Modified | 未確認 | CWE-369 | A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing |
| CVE-2025-70101 | Modified | 未確認 | CWE-125 | An out-of-bounds read in the ext4_ext_binsearch_idx function in src/ext4_extent.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by supplying a specially |
| CVE-2025-70102 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parse_option() (src/if-options.c:1886), the code perform |
| CVE-2025-7011 | Deferred | 未確認 | CWE-125 | Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus p |
| CVE-2025-7017 | Deferred | 未確認 | CWE-125 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the anti |
| CVE-2025-7018 | Deferred | 未確認 | CWE-476 | Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This issue |
| CVE-2025-7019 | Deferred | 未確認 | CWE-121 | Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antiv |
| CVE-2025-7064 | Deferred | 未確認 | CWE-305 | Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024. |
| CVE-2025-71261 | Awaiting Analysis | 未確認 | CWE-295 | An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to by |
| CVE-2025-71313 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_workqueue() alloc_workqueue() can return NULL on memory alloca |
| CVE-2025-71314 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches() failures We have seen a few cases where the whole memory | |
| CVE-2025-71315 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code i | |
| CVE-2025-71316 | Awaiting Analysis | 未確認 | CWE-176 | SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load |
| CVE-2025-71317 | Deferred | 未確認 | CWE-798 | NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate thro |
| CVE-2025-71318 | Deferred | 未確認 | CWE-306 | NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages (such as |
| CVE-2025-71319 | Analyzed | 未確認 | CWE-835 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image |
| CVE-2025-71320 | Deferred | 未確認 | CWE-184 | picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to bypass security checks. Remote |
| CVE-2025-71321 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file. Attackers |
| CVE-2025-71322 | Deferred | 未確認 | CWE-693 | PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks. Malicious actors can craft pickle payload |
| CVE-2025-71323 | Deferred | 未確認 | CWE-184 | picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can c |
| CVE-2025-71324 | Modified | 未確認 | CWE-73 | Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The |
| CVE-2025-71325 | Deferred | 未確認 | CWE-391 | picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowi |
| CVE-2025-71326 | Awaiting Analysis | 未確認 | CWE-428 | AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated SYSTEM privileg |
| CVE-2025-71327 | Analyzed | 未確認 | CWE-306 | Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote a |
| CVE-2025-71328 | Analyzed | 未確認 | CWE-620 | Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their account password through the account settings (Security) section |
| CVE-2025-71329 | Analyzed | 未確認 | CWE-835 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image |
| CVE-2025-71330 | Analyzed | 未確認 | CWE-835 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS i |
| CVE-2025-71331 | Analyzed | 未確認 | CWE-80 | Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject |
| CVE-2025-71332 | Analyzed | 未確認 | CWE-89 | Flowise through 2.2.7 contains a SQL injection vulnerability in the importChatflows API. Due to insufficient validation of the chatflow.id value, an authenticated user can supply a |
| CVE-2025-71333 | Analyzed | 未確認 | CWE-73 | Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local. Attackers can exploit pa |
| CVE-2025-71334 | Analyzed | 未確認 | CWE-73 | Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are U |
| CVE-2025-71335 | Analyzed | 未確認 | CWE-613 | Flowise before 3.0.10 (affected versions 3.0.7 and earlier) fails to invalidate existing sessions and session tokens after a user changes their password. An attacker who already ho |
| CVE-2025-71336 | Analyzed | 未確認 | CWE-78 | Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnerability in the Custom MCP feature, which is designed to execu |
| CVE-2025-71337 | Analyzed | 未確認 | CWE-620 | Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change vulnerability. An authenticated user can change the account email address, used as a |
| CVE-2025-71338 | Modified | 未確認 | CWE-73 | Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write files outside the storage directory. Attack |
| CVE-2025-71339 | Deferred | 未確認 | CWE-502 | Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malici |
| CVE-2025-71340 | Deferred | 未確認 | CWE-502 | picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code |
| CVE-2025-71341 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers ca |
| CVE-2025-71344 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute a |
| CVE-2025-71348 | Analyzed | 未確認 | CWE-502 | picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files |
| CVE-2025-71349 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect the built-in trace.Trace.run function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers |
| CVE-2025-71350 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collect_env.run function in reduce methods. Attackers can embed undetected code in pickle files th |
| CVE-2025-71351 | Deferred | 未確認 | CWE-184 | picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ method, allowing remote code execution. Attackers can craft pickle files |
| CVE-2025-71352 | Deferred | 未確認 | CWE-693 | picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce methods, allowing attackers to execute arbitrary code. Remo |
| CVE-2025-71354 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.SetText function in reduce methods. Attackers can craft pickle files wi |
| CVE-2025-71355 | Deferred | 未確認 | CWE-184 | Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserializatio |
| CVE-2025-71357 | Analyzed | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickl |
| CVE-2025-71358 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.autocomplete.AutoComplete.get_entity function in reduce methods. Attackers can embed undetected |
| CVE-2025-71361 | Deferred | 未確認 | CWE-95 | picklescan before 0.0.29 fails to detect malicious idlelib.calltip.Calltip.fetch_tip calls in pickle files, allowing remote code execution. Attackers can embed undetected payloads |
| CVE-2025-71363 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect cProfile.run function calls in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pi |
| CVE-2025-71365 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.33 fails to detect malicious pickle files that invoke numpy.f2py.crackfortran.myeval function through the reduce method. Attackers can craft malicious pickle |
| CVE-2025-71368 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect the doctest.debug_script function when analyzing pickle files, allowing attackers to execute arbitrary code. Remote attackers can craft mal |
| CVE-2025-71370 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.28 fails to detect malicious torch.jit.unsupported_tensor_ops.execWrapper function calls embedded in pickle files. Attackers can craft malicious pickle files |
| CVE-2025-71371 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect malicious pickle files using code.InteractiveInterpreter.runcode in reduce methods. Attackers can craft pickle payloads that bypass pickles |
| CVE-2025-71374 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbitrary code. Remote a |
| CVE-2025-71376 | Deferred | 未確認 | CWE-502 | picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.autocomplete.AutoComplete.fetch_completions in reduce methods. Attackers can embed undetected code in |
| CVE-2025-71378 | Analyzed | 未確認 | CWE-502 | picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass p |
| CVE-2025-71379 | Analyzed | 未確認 | CWE-1333 | vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Several regex patterns — in vllm/lora/utils.py, the phi4mini tool |
| CVE-2025-71381 | Deferred | 未確認 | CWE-113 | Hono before 4.10.2 (fixed in 4.10.3) contains a flaw in its CORS middleware: when the origin is not set to "*", the middleware copies the Vary header from the incoming request into |
| CVE-2025-71382 | Analyzed | 未確認 | CWE-674 | MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a m |
| CVE-2025-7386 | Deferred | 未確認 | CWE-522 | Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: befor |
| CVE-2025-7406 | Analyzed | 未確認 | CWE-269 | Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root pri |
| CVE-2025-7737 | Deferred | 未確認 | CWE-770 | DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E990, E1090, E1090H: before DKCMAIN Ver.93-07-2 |
| CVE-2025-7958 | Awaiting Analysis | 未確認 | CWE-94 | A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifa |
| CVE-2025-8106 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-8444 | Deferred | 未確認 | CWE-79 | The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the multiple |
| CVE-2025-8873 | Awaiting Analysis | 未確認 | CWE-1286 | On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to stop processing all IPsec traffic. The control plane may detec |
| CVE-2025-9032 | Deferred | 未確認 | CWE-125 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antiv |
| CVE-2025-9033 | Deferred | 未確認 | CWE-125 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus en |
| CVE-2025-9912 | Awaiting Analysis | 未確認 | CWE-269 | Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary comma |
| CVE-2026-0009 | Modified | 未確認 | CWE-269 | In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges nee |
| CVE-2026-0016 | Modified | 未確認 | CWE-269 | In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. This could lead to loc |
| CVE-2026-0018 | Modified | 未確認 | CWE-20 | In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of ser |
| CVE-2026-0019 | Modified | 未確認 | CWE-269 | In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-0036 | Analyzed | 未確認 | CWE-1021 | In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additi |
| CVE-2026-0039 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to remote denial of service with n |
| CVE-2026-0040 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additi |
| CVE-2026-0041 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remote denial of service with no additional ex |
| CVE-2026-0042 | Analyzed | 未確認 | CWE-400 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no |
| CVE-2026-0043 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local escalation of privilege w |
| CVE-2026-0044 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This could lead to remote denial of service wi |
| CVE-2026-0045 | Analyzed | 未確認 | CWE-693 | In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of pr |
| CVE-2026-0046 | Analyzed | 未確認 | CWE-269 | In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation o |
| CVE-2026-0048 | Analyzed | 未確認 | CWE-269 | In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This could lead to local escalation of privile |
| CVE-2026-0050 | Analyzed | 未確認 | CWE-269 | In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure |
| CVE-2026-0051 | Analyzed | 未確認 | CWE-20 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation. This could lead to remote denial of service w |
| CVE-2026-0052 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additi |
| CVE-2026-0055 | Analyzed | 未確認 | CWE-22, CWE-269 | In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a path traversal error. Th |
| CVE-2026-0056 | Analyzed | 未確認 | CWE-120 | In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no additional execution |
| CVE-2026-0057 | Analyzed | 未確認 | CWE-862 | In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local informat |
| CVE-2026-0059 | Analyzed | 未確認 | CWE-122 | In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execu |
| CVE-2026-0060 | Analyzed | 未確認 | In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This could lead to local denial of | |
| CVE-2026-0061 | Analyzed | 未確認 | CWE-1021 | In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalati |
| CVE-2026-0063 | Analyzed | 未確認 | CWE-269 | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This could lead to local escalation o |
| CVE-2026-0064 | Analyzed | 未確認 | CWE-400 | In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges |
| CVE-2026-0067 | Analyzed | 未確認 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code. This could lead to local denia | |
| CVE-2026-0068 | Analyzed | 未確認 | CWE-362 | In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync from persistence. Th |
| CVE-2026-0069 | Analyzed | 未確認 | CWE-400 | In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional executio |
| CVE-2026-0070 | Analyzed | 未確認 | CWE-20 | In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denia |
| CVE-2026-0071 | Analyzed | 未確認 | CWE-862 | In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privile |
| CVE-2026-0072 | Analyzed | 未確認 | CWE-285 | In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no |
| CVE-2026-0074 | Analyzed | 未確認 | CWE-400 | In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additi |
| CVE-2026-0075 | Modified | 未確認 | CWE-89 | In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-0076 | Modified | 未確認 | CWE-125 | In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional e |
| CVE-2026-0077 | Modified | 未確認 | CWE-693 | In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This could lead to local escalation |
| CVE-2026-0078 | Analyzed | 未確認 | CWE-20 | In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege w |
| CVE-2026-0079 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local denial of service with no |
| CVE-2026-0080 | Analyzed | 未確認 | CWE-190 | In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additi |
| CVE-2026-0081 | Analyzed | 未確認 | CWE-862 | In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges ne |
| CVE-2026-0082 | Analyzed | 未確認 | CWE-453 | In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalat |
| CVE-2026-0083 | Analyzed | 未確認 | CWE-362 | In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileg |
| CVE-2026-0085 | Analyzed | 未確認 | CWE-20 | In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of servi |
| CVE-2026-0086 | Analyzed | 未確認 | CWE-269 | In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with |
| CVE-2026-0087 | Analyzed | 未確認 | CWE-693 | In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to lo |
| CVE-2026-0088 | Analyzed | 未確認 | CWE-451 | In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lead to local escalation |
| CVE-2026-0089 | Analyzed | 未確認 | CWE-269 | In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to local escalation of |
| CVE-2026-0091 | Analyzed | 未確認 | CWE-269 | In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with n |
| CVE-2026-0092 | Analyzed | 未確認 | CWE-862 | In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional executi |
| CVE-2026-0093 | Analyzed | 未確認 | CWE-451 | In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User i |
| CVE-2026-0094 | Analyzed | 未確認 | CWE-451 | In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could le |
| CVE-2026-0095 | Analyzed | 未確認 | CWE-190 | In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow. This could lea |
| CVE-2026-0096 | Analyzed | 未確認 | CWE-451 | In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escala |
| CVE-2026-0097 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation o |
| CVE-2026-0098 | Analyzed | 未確認 | CWE-441 | In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege wi |
| CVE-2026-0099 | Analyzed | 未確認 | CWE-273 | In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalati |
| CVE-2026-0100 | Analyzed | 未確認 | CWE-122 | In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution priv |
| CVE-2026-0125 | Analyzed | 未確認 | CWE-416 | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution priv |
| CVE-2026-0126 | Modified | 未確認 | CWE-120, CWE-787 | In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User in |
| CVE-2026-0127 | Analyzed | 未確認 | CWE-125 | In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory corruption. This could lead to remote denial of service cau |
| CVE-2026-0128 | Modified | 未確認 | CWE-125, CWE-190 | In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional executio |
| CVE-2026-0129 | Modified | 未確認 | CWE-120 | In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges need |
| CVE-2026-0130 | Modified | 未確認 | CWE-122, CWE-125 | In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution p |
| CVE-2026-0131 | Analyzed | 未確認 | CWE-125, CWE-190 | In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privi |
| CVE-2026-0132 | Analyzed | 未確認 | CWE-122 | In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User inter |
| CVE-2026-0133 | Analyzed | 未確認 | CWE-862 | In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escal |
| CVE-2026-0134 | Modified | 未確認 | CWE-1188 | In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local information disclosu |
| CVE-2026-0135 | Analyzed | 未確認 | CWE-125 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User intera |
| CVE-2026-0136 | Modified | 未確認 | CWE-120, CWE-125 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User int |
| CVE-2026-0137 | Analyzed | 未確認 | CWE-416 | In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege wit |
| CVE-2026-0138 | Analyzed | 未確認 | CWE-120, CWE-787 | In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System executio |
| CVE-2026-0139 | Analyzed | 未確認 | CWE-119 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User inter |
| CVE-2026-0140 | Analyzed | 未確認 | CWE-125, CWE-190 | In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privile |
| CVE-2026-0141 | Modified | 未確認 | CWE-120, CWE-125 | In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution p |
| CVE-2026-0142 | Modified | 未確認 | CWE-125, CWE-20 | In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional exe |
| CVE-2026-0143 | Analyzed | 未確認 | CWE-416 | In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System exec |
| CVE-2026-0144 | Modified | 未確認 | CWE-120 | In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This could lead to remote denial of service with no additional execu |
| CVE-2026-0145 | Modified | 未確認 | CWE-862 | In keymint, there is a possible Permission Bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. |
| CVE-2026-0146 | Analyzed | 未確認 | CWE-120, CWE-787 | In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no |
| CVE-2026-0147 | Analyzed | 未確認 | CWE-120, CWE-787 | In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wi |
| CVE-2026-0148 | Analyzed | 未確認 | CWE-190, CWE-787 | In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additi |
| CVE-2026-0149 | Analyzed | 未確認 | CWE-122, CWE-787 | In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges need |
| CVE-2026-0150 | Analyzed | 未確認 | CWE-190, CWE-787 | In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with root |
| CVE-2026-0151 | Analyzed | 未確認 | CWE-190, CWE-787 | In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile |
| CVE-2026-0152 | Undergoing Analysis | 未確認 | CWE-119 | In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This |
| CVE-2026-0153 | Undergoing Analysis | 未確認 | CWE-787 | In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe |
| CVE-2026-0154 | Undergoing Analysis | 未確認 | CWE-120 | In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This could lead to remote code execution with no additional executio |
| CVE-2026-0155 | Undergoing Analysis | 未確認 | CWE-120, CWE-125 | In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution priv |
| CVE-2026-0156 | Modified | 未確認 | CWE-476 | In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. This could lead to remote denial of service with no additional ex |
| CVE-2026-0157 | Undergoing Analysis | 未確認 | CWE-120, CWE-125 | In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privilege |
| CVE-2026-0158 | Modified | 未確認 | CWE-862 | In Camera, there is a possible unauthorized way to access photos due to a missing permission check. This could lead to local information disclosure with no additional execution pri |
| CVE-2026-0160 | Analyzed | 未確認 | CWE-120 | In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe |
| CVE-2026-0161 | Analyzed | 未確認 | CWE-190, CWE-787 | In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege with no additional |
| CVE-2026-0162 | Analyzed | 未確認 | CWE-843 | In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to remote code execution with no additional execution privilege |
| CVE-2026-0164 | Analyzed | 未確認 | CWE-120, CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User inter |
| CVE-2026-0165 | Modified | 未確認 | CWE-120, CWE-125 | In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure with no addi |
| CVE-2026-0266 | Modified | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interf |
| CVE-2026-0267 | Analyzed | 未確認 | CWE-532 | An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or u |
| CVE-2026-0268 | Analyzed | 未確認 | CWE-424 | A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does not impact Prisma Acc |
| CVE-2026-0269 | Modified | 未確認 | CWE-754 | A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a malicio |
| CVE-2026-0270 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to i |
| CVE-2026-0271 | Analyzed | 未確認 | CWE-732 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This |
| CVE-2026-0272 | Modified | 未確認 | CWE-862, CWE-863 | A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions |
| CVE-2026-0273 | Modified | 未確認 | CWE-78 | A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root u |
| CVE-2026-0274 | Undergoing Analysis | 未確認 | CWE-1390 | An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify |
| CVE-2026-0409 | Analyzed | 未確認 | CWE-119 | A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the |
| CVE-2026-0410 | Analyzed | 未確認 | CWE-20 | Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality. |
| CVE-2026-0411 | Analyzed | 未確認 | CWE-200 | An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi ro |
| CVE-2026-0412 | Analyzed | 未確認 | CWE-20 | Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network t |
| CVE-2026-0413 | Analyzed | 未確認 | CWE-121 | A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unautho |
| CVE-2026-0414 | Analyzed | 未確認 | CWE-94 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of rou |
| CVE-2026-0415 | Analyzed | 未確認 | CWE-20 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of rou |
| CVE-2026-0416 | Analyzed | 未確認 | CWE-20 | An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input th |
| CVE-2026-0417 | Analyzed | 未確認 | CWE-20 | Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity. |
| CVE-2026-0418 | Analyzed | 未確認 | CWE-15, CWE-610 | Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system. |
| CVE-2026-0419 | Analyzed | 未確認 | CWE-20 | Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operati |
| CVE-2026-0420 | Analyzed | 未確認 | CWE-325 | An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiT |
| CVE-2026-0466 | Analyzed | 未確認 | CWE-497 | Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of servi |
| CVE-2026-0611 | Deferred | 未確認 | CWE-306 | Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting |
| CVE-2026-0646 | Awaiting Analysis | 未確認 | CWE-401 | A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter fault |
| CVE-2026-0647 | Awaiting Analysis | 未確認 | CWE-306 | An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's we |
| CVE-2026-0685 | Awaiting Analysis | 未確認 | Server side template inject (SSTI) in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution (RCE) vi | |
| CVE-2026-0826 | Awaiting Analysis | 未確認 | CWE-121 | In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice prod |
| CVE-2026-0828 | Awaiting Analysis | 未確認 | Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and terminate protected sy | |
| CVE-2026-0864 | Analyzed | 未確認 | CWE-74 | When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with u |
| CVE-2026-0934 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have all |
| CVE-2026-10023 | Deferred | 未確認 | CWE-639 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all |
| CVE-2026-10024 | Deferred | 未確認 | CWE-79 | The TinyMCE shortcode Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'btnrel' Shortcode Attribute in all versions up to, and including, 1.0.0 due to in |
| CVE-2026-10029 | Deferred | 未確認 | CWE-862 | The Event Koi Lite – Events Calendar, Event Management, RSVP, and Tickets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, |
| CVE-2026-10034 | Deferred | 未確認 | CWE-862 | The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.39. This is due to the plugin not properly verifying |
| CVE-2026-10038 | Deferred | 未確認 | CWE-639 | The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct Object Reference / Authorization |
| CVE-2026-10043 | Awaiting Analysis | 未確認 | CWE-502 | MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati |
| CVE-2026-10045 | Deferred | 未確認 | Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN a | |
| CVE-2026-10046 | Analyzed | 未確認 | CWE-787 | Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios_handlers.c. |
| CVE-2026-10047 | Analyzed | 未確認 | CWE-787 | The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kernel/handler.c. The handler uses a |
| CVE-2026-10083 | Deferred | 未確認 | The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a Stored Cross-Site Scripting vulnerab | |
| CVE-2026-10086 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have all |
| CVE-2026-10087 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have a |
| CVE-2026-10091 | Deferred | 未確認 | CWE-79 | The Email JavaScript Cloak plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email' shortcode in all versions up to, and including, 1.03 due to in |
| CVE-2026-10092 | Deferred | 未確認 | CWE-79 | The Cincopa video and media plug-in plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cincopa Shortcode in Post Comments in all versions up to, and including, 1 |
| CVE-2026-10093 | Deferred | 未確認 | CWE-79 | The File Sharing & Download Manager – User Private Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fldr_ttl' parameter in all versions up to, and i |
| CVE-2026-10094 | Awaiting Analysis | 未確認 | CWE-22 | A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrar |
| CVE-2026-10097 | Modified | 未確認 | CWE-697 | wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decap |
| CVE-2026-10098 | Analyzed | 未確認 | CWE-295 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be reported as the |
| CVE-2026-10100 | Deferred | 未確認 | CWE-79 | The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields (Page Background, Form Background, Text Color, Link Col |
| CVE-2026-10109 | Analyzed | 未確認 | CWE-94 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling. |
| CVE-2026-10118 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow |
| CVE-2026-10129 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low- |
| CVE-2026-10134 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, and |
| CVE-2026-10140 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can ma |
| CVE-2026-10142 | Analyzed | 未確認 | CWE-789 | kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or |
| CVE-2026-10143 | Modified | 未確認 | CWE-400, CWE-606 | kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client |
| CVE-2026-10201 | Deferred | 未確認 | CWE-369, CWE-404 | A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Hand |
| CVE-2026-10202 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SystemDictControl |
| CVE-2026-10203 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SystemParamControll |
| CVE-2026-10204 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SysUserContr |
| CVE-2026-10205 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function of the file develop/systparam/softlogo/upload.jsp. Such manip |
| CVE-2026-10206 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in s |
| CVE-2026-10208 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of the file login_1.php. Executing a manipulation of the argume |
| CVE-2026-10209 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the component Appointmen |
| CVE-2026-10210 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/skills/skill_manager.p |
| CVE-2026-10211 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py. This ma |
| CVE-2026-10212 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astrbot/core/astr_main_agent.py. Such manipulation of the argume |
| CVE-2026-10213 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /api/skills/delete of the component API Endpoint. Performing |
| CVE-2026-10214 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component |
| CVE-2026-10215 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/api_holidays.class.ph |
| CVE-2026-10216 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown function of the file server/src/routes/pairing.ts of the component claim Endpoi |
| CVE-2026-10217 | Deferred | 未確認 | CWE-266, CWE-269 | A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the file internal/http/tts_config.go of the component RoleAdmin Ga |
| CVE-2026-10218 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3. This affects the function auth of the file internal/http/evolution_handlers.go. Such manipulation leads to i |
| CVE-2026-10219 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. This impacts the function FsBridge.WriteFile of the file internal/sandbox/fsbridge.go of the component write_file |
| CVE-2026-10220 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. Affected is the function _serve_plugin_skill/skill_view of the file tools/skills_tool.py. Executing a m |
| CVE-2026-10221 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipulatio |
| CVE-2026-10222 | Deferred | 未確認 | CWE-707, CWE-74 | A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The m |
| CVE-2026-10223 | Deferred | 未確認 | CWE-707, CWE-74 | A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_content of the file tools/memory_tool.py. This manipulation caus |
| CVE-2026-10224 | Deferred | 未確認 | CWE-400, CWE-404 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the file gateway/platfor |
| CVE-2026-10225 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. This issue affects some unknown processing of the fil |
| CVE-2026-10226 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. Impacted is an unknown function of the file delete.php. Exec |
| CVE-2026-10227 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. The affected element is an unknown function of the |
| CVE-2026-10228 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. The impacted element is an unknown function of the file |
| CVE-2026-10229 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_meshes of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. This |
| CVE-2026-10230 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::read_animations of the file HL1MDLLoader.cpp of the component H |
| CVE-2026-10231 | Deferred | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL L |
| CVE-2026-10232 | Deferred | 未確認 | CWE-119, CWE-416 | A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function aiNode::~aiNode of the file scene.cpp of the component ASE File Parser. Executi |
| CVE-2026-10233 | Deferred | 未確認 | CWE-119, CWE-125 | A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the compo |
| CVE-2026-10234 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Mettle sendportal up to 3.0.1. This affects an unknown part of the file /webview/ of the component Campaign Handler. The manipulation of the argumen |
| CVE-2026-10235 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stock_manager.php. This manipulat |
| CVE-2026-10236 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save of the compon |
| CVE-2026-10237 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Man |
| CVE-2026-10238 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-10239 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUtil.addImage of the file /airag/word/edit. Executing a manipulation can lead to s |
| CVE-2026-10240 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in JeecgBoot up to 3.9.2. The impacted element is an unknown function of the file /airag/airagModel/test. The manipulation of the argument baseUrl le |
| CVE-2026-10241 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1. This affects the function FileDownloadUtils.download2DiskFromNet of the file /airag/ap |
| CVE-2026-10242 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topi |
| CVE-2026-10243 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to mi |
| CVE-2026-10244 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function create_medicine_name of the file /ShowForm/cr |
| CVE-2026-10245 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function create_supplier of the file /ShowForm/create_supplier/main. |
| CVE-2026-10246 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function create_medicine_presentation of the file /ShowForm/create_medici |
| CVE-2026-10247 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects the function create_generic_name of the file /ShowForm/create_generi |
| CVE-2026-10248 | Deferred | 未確認 | CWE-1236, CWE-74 | A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the function create_supplier of the file /Export_csv/export of th |
| CVE-2026-10249 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0. Impacted is an unknown function of the file /admin/viewrequest.php. Such manipulation of the |
| CVE-2026-10250 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Online Blood Bank Management System 1.0. The affected element is an unknown function of the file /admin/campsdetails.php. Perfor |
| CVE-2026-10251 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online House Rental System 1.0. The impacted element is an unknown function of the file /ajax.php?action=login. Executing a manipulat |
| CVE-2026-10252 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown function of the file /manage_tenant.php. The manipulation of the |
| CVE-2026-10253 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Online House Rental System 1.0. This impacts an unknown function of the file /manage_payment.php. The manipulation of the argument ID r |
| CVE-2026-10254 | Deferred | 未確認 | CWE-200, CWE-538 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory infor |
| CVE-2026-10255 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function sell_statement of the file application/cont |
| CVE-2026-10256 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /save_comment.php. The manipulation of the argumen |
| CVE-2026-10257 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/update_ss_img.php. The manipulation |
| CVE-2026-10258 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the file /admin/add_sub_topic.php. This manipulation of the argumen |
| CVE-2026-10259 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in H3C Magic B0 up to 100R002. The affected element is the function SetMobileAPInfoById of the file /goform/aspForm. Such manipulation of |
| CVE-2026-10260 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /admin/jobs-admins/delete-jobs.php. Performing a manipulati |
| CVE-2026-10261 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/application_status.php. Executing a manipulation of the argument ID ca |
| CVE-2026-10262 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Real State Services 1.0. This impacts an unknown function of the file /loginuser.php of the component Login. The manipulation of the |
| CVE-2026-10263 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manage_product.php. The ma |
| CVE-2026-10264 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessageRequest of the file whatsapp-bridge/main.go of the componen |
| CVE-2026-10265 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_topic.php. Such manipulat |
| CVE-2026-10267 | Deferred | 未確認 | CWE-119, CWE-125 | A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bo |
| CVE-2026-10268 | Deferred | 未確認 | CWE-189, CWE-190 | A weakness has been identified in janet-lang janet up to 1.41.0. This vulnerability affects the function unmarshal_one_fiber of the file src/core/marsh.c. Executing a manipulation |
| CVE-2026-10269 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in decolua 9router up to 0.4.0. This issue affects the function isAuthenticated of the file src/dashboardGuard.js of the component HTTP H |
| CVE-2026-10270 | Analyzed | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpd_debug.asp of the component API. The manipulation of the ar |
| CVE-2026-10271 | Deferred | 未確認 | CWE-698, CWE-705 | A flaw has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. The affected element is an unknown function of the file admin/ of the compon |
| CVE-2026-10272 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. The impacted element is an unknown function of the file admin/delet |
| CVE-2026-10273 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in php-censor up to 2.1.6. This affects an unknown function of the file src/Model/Build/GitBuild.php of the component Webhook Endpoint. Performing a manip |
| CVE-2026-10274 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. This impacts the function getAssetMetadata of the file src/mcp-se |
| CVE-2026-10275 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. |
| CVE-2026-10276 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of the file src/index.ts of the component get_build_status/get_b |
| CVE-2026-10277 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affects the function saveToDisk of the file src/tools/gmail.ts of |
| CVE-2026-10278 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in ishayoyo excel-mcp up to 1.0.2. Impacted is an unknown function of the file src/index.ts of the component read_file/write_file. Executing a manipu |
| CVE-2026-10279 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the file src/wezterm_executor.ts of the component switch_pane/wr |
| CVE-2026-10280 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in horizon921 mcpilot 0.1.0. The impacted element is an unknown function of the file client/src/app/api/mcp/call/route.ts of the component MCP A |
| CVE-2026-10281 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of the file src/embedded-server.ts of the component API Endpoint. |
| CVE-2026-10282 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in Bottelet DaybydayCRM up to 2.2.1. This impacts the function view of the file app/Http/Controllers/DocumentsController.php. Such manipu |
| CVE-2026-10283 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setting Handler. Performing a manipulation results in missing aut |
| CVE-2026-10284 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resou |
| CVE-2026-10285 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this issue is the function KanbanScrumHelper::recordUpdated of the file app/Helpers/ |
| CVE-2026-10286 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in CodeAstro Payroll System 1.0. This affects an unknown part of the file /home_employee.php. The manipulation of the argument emp_id results in sql injec |
| CVE-2026-10287 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in SourceCodester SEO Meta Tag Extractor 1.0. This vulnerability affects the function get_headers of the file /index.php. This manipulation of the ar |
| CVE-2026-10288 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the compon |
| CVE-2026-10289 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation o |
| CVE-2026-10290 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Para |
| CVE-2026-10291 | Deferred | 未確認 | CWE-1333, CWE-400 | A security vulnerability has been detected in Enderfga claw-orchestrator up to 3.7.0. The impacted element is the function validateRegex of the file claw-orchestrator/src/embedded- |
| CVE-2026-10292 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function strcpy of the file /goform/formTaskEdit. The manipulation results in stack-based buff |
| CVE-2026-10293 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes st |
| CVE-2026-10294 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argum |
| CVE-2026-10295 | Deferred | 未確認 | CWE-404 | A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py |
| CVE-2026-10296 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of t |
| CVE-2026-10297 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /manage_course.php. The manipulation of the argument ID leads to |
| CVE-2026-10298 | Deferred | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation re |
| CVE-2026-10299 | Deferred | 未確認 | CWE-99 | A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulati |
| CVE-2026-10300 | Deferred | 未確認 | CWE-617 | A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTT |
| CVE-2026-10301 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argumen |
| CVE-2026-10302 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the file /manage_fee.php. Executing a manipulation of the argument |
| CVE-2026-10303 | Awaiting Analysis | 未確認 | CWE-73 | In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, |
| CVE-2026-10305 | Deferred | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers. This issue affects rlottie: before 223a2a41ba4f462e4abe767bebba49a366c9b9fd. |
| CVE-2026-10510 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote att |
| CVE-2026-10512 | Analyzed | 未確認 | CWE-682 | The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reduction, so the computed result may not be fully reduced modulo the fie |
| CVE-2026-10513 | Deferred | 未確認 | CWE-79 | The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.8.0 via parser-derived 'avatar' and 'url' author metadata. This i |
| CVE-2026-10514 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimCo |
| CVE-2026-10517 | Rejected | 未確認 | Rejected reason: Retracted following review by Red Hat Product Security and confirmation from the upstream Clair/Claircore maintainer. This CVE misattributes the described behavior | |
| CVE-2026-10520 | Analyzed | 掲載 | CWE-78 | An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execu |
| CVE-2026-10521 | Deferred | 未確認 | CWE-425 | An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a |
| CVE-2026-10523 | Analyzed | 未確認 | CWE-288 | An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary admi |
| CVE-2026-10528 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This issue affects the function DcmItem::read of the file OrthancFramework/Sources/DicomParsing/FromDcmtk |
| CVE-2026-10529 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unknown function of the file src/main/java/com/zhiliao/module/we |
| CVE-2026-10530 | Deferred | 未確認 | The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to pr | |
| CVE-2026-10531 | Deferred | 未確認 | The AI Share & Summarize WordPress plugin before 2.0.4 does not sanitise and escape some of its shortcode attributes before outputting them in a page, allowing users with the Contr | |
| CVE-2026-10532 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restr |
| CVE-2026-10533 | Analyzed | 未確認 | CWE-770 | A flaw was found in OpenShift Container Platform. Completed pods with restartPolicy: Never do not count toward ResourceQuota pod limits, and Kubernetes events are not quota-scoped. |
| CVE-2026-10544 | Analyzed | 未確認 | CWE-78 | Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authenticated user with write access to a vault |
| CVE-2026-10546 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component ( src/lfx/src/lfx/components/data_source/url.py ) due to a Tim |
| CVE-2026-10548 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthropic_entry_from_credentials_file of the file agent/credential |
| CVE-2026-10549 | Deferred | 未確認 | CWE-280 | LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauth |
| CVE-2026-10550 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipu |
| CVE-2026-10552 | Deferred | 未確認 | CWE-352 | The Blue Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.0.1. This is due to missing or incorrect nonce validation on the |
| CVE-2026-10553 | Deferred | 未確認 | CWE-352 | The jQuery Hover Footnotes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce val |
| CVE-2026-10557 | Deferred | 未確認 | CWE-798 | The Yarbo Android and iOS applications contain hard-coded MQTT broker credentials that are identical for all users and all devices. These credentials are embedded in the applicatio |
| CVE-2026-10558 | Deferred | 未確認 | CWE-73 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument |
| CVE-2026-10559 | Deferred | 未確認 | CWE-73 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is an unknown function of the file /index.php. Executing a manipulation of the argument p |
| CVE-2026-10560 | Analyzed | 未確認 | CWE-287 | IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/ endpoints that allows an unauthenticated attacker to read build ev |
| CVE-2026-10561 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated att |
| CVE-2026-10562 | Deferred | 未確認 | CWE-601 | An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface. An unauthent |
| CVE-2026-10564 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTT |
| CVE-2026-10565 | Deferred | 未確認 | CWE-362 | A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode of the file src/amf/gmm-sm.c of the component NGAP Handover |
| CVE-2026-10566 | Deferred | 未確認 | CWE-20, CWE-502 | A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manipula |
| CVE-2026-10567 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the file src/main/java/cn/cordys/crm/system/service/ModuleFormServ |
| CVE-2026-10568 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /manage_payment.php. The manipulation of the argument ID result |
| CVE-2026-10580 | Deferred | 未確認 | CWE-285 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9. |
| CVE-2026-10581 | Deferred | 未確認 | CWE-918 | A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64_decode of the file /plus/download.php?open=1. This manipulation of the argument Link |
| CVE-2026-10583 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. Affected by this issue is the function Import of the file internal/http/tts_config.go of the com |
| CVE-2026-10584 | Awaiting Analysis | 未確認 | CWE-319 | Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interc |
| CVE-2026-10585 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to execute arbitrary JavaScript in another user's brow |
| CVE-2026-10586 | Deferred | 未確認 | CWE-918 | The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including |
| CVE-2026-10591 | Analyzed | 未確認 | CWE-732 | Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via c |
| CVE-2026-10592 | Analyzed | 未確認 | CWE-295 | Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permi |
| CVE-2026-10593 | Modified | 未確認 | CWE-476 | The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications. In unicast_client_ep_qos_state() (subsys/bluetooth/audio/ba |
| CVE-2026-10597 | Deferred | 未確認 | CWE-639 | OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's ema |
| CVE-2026-10601 | Modified | 未確認 | CWE-22 | A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configur |
| CVE-2026-10606 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a manipul |
| CVE-2026-10607 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads |
| CVE-2026-10608 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results |
| CVE-2026-10609 | Analyzed | 未確認 | CWE-862 | A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying t |
| CVE-2026-10611 | Analyzed | 未確認 | CWE-287 | An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments configured with LdapAuth.mixedAuth=true and Sec |
| CVE-2026-10616 | Deferred | 未確認 | CWE-862, CWE-863 | A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function TeamTasksTool.executeComplete of the file internal/tools/team_tasks_lif |
| CVE-2026-10617 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook |
| CVE-2026-10619 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This impacts an unknown function. The manipulation results in imp |
| CVE-2026-10620 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql in |
| CVE-2026-10621 | Awaiting Analysis | 未確認 | Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicali | |
| CVE-2026-10622 | Awaiting Analysis | 未確認 | Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints. | |
| CVE-2026-10623 | Deferred | 未確認 | CWE-639 | The PressPrimer Quiz – AI Quiz Maker, Exam Builder & LMS Assessment Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi |
| CVE-2026-10624 | Deferred | 未確認 | CWE-99 | A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the compon |
| CVE-2026-10629 | Deferred | 未確認 | SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (missing Security-Client/Security-Server headers and ESP traffi | |
| CVE-2026-10634 | Modified | 未確認 | CWE-416 | Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which caches a pointer t |
| CVE-2026-10635 | Modified | 未確認 | CWE-416 | On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, xtensa_domain_list, of active memory domain |
| CVE-2026-10636 | Modified | 未確認 | CWE-416 | In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface back out of the packet via net_pkt_iface(pkt) after the packet had been handed |
| CVE-2026-10637 | Modified | 未確認 | CWE-416 | subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after net_send_data(pkt) returned successfully. Per the network stack's ownership contract (inc |
| CVE-2026-10638 | Modified | 未確認 | CWE-416 | subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed to net_try_send_data(). In icmpv6_handle_echo_request() and net_icmpv6_send_erro |
| CVE-2026-10639 | Modified | 未確認 | CWE-416 | In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo-reply packet (reply), hands it to net_try_send_data(), and then, on success, ca |
| CVE-2026-10640 | Modified | 未確認 | CWE-416 | Zephyr's IPv6 Neighbor Discovery send paths (net_ipv6_send_na, net_ipv6_send_ns, net_ipv6_send_rs in subsys/net/ip/ipv6_nbr.c) updated the per-interface ICMP-sent statistics by cal |
| CVE-2026-10641 | Modified | 未確認 | CWE-787 | Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bounds write. During Service Level Connection |
| CVE-2026-10642 | Modified | 未確認 | CWE-835 | The Zephyr PL011 UART driver (drivers/serial/uart_pl011.c) contains an unbounded software loop in pl011_irq_tx_enable() that repeatedly invokes the interrupt-driven application cal |
| CVE-2026-10643 | Modified | 未確認 | CWE-787 | Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using only the payl |
| CVE-2026-10644 | Modified | 未確認 | CWE-787 | The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH SoC family, contains an out-of-bounds write in its asynchronous (DMA) receive pat |
| CVE-2026-10645 | Modified | 未確認 | CWE-125 | The Zephyr ext2 filesystem driver (subsys/fs/ext2) trusted the on-disk directory entry fields de_rec_len and de_name_len when walking a directory block. ext2_fetch_direntry() guard |
| CVE-2026-10646 | Modified | 未確認 | CWE-416 | Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) passes a pointer to a stack-allocated state object (struct getaddrinfo_state ai_state) as t |
| CVE-2026-10647 | Modified | 未確認 | CWE-667, CWE-833 | The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send(). When the |
| CVE-2026-10648 | Modified | 未確認 | CWE-476 | mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL. smp_packet_all |
| CVE-2026-10649 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially |
| CVE-2026-10650 | Deferred | 未確認 | CWE-400, CWE-404 | A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the componen |
| CVE-2026-10651 | Modified | 未確認 | CWE-20, CWE-617 | bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the 2-byte attribute ID (a check of buf->le |
| CVE-2026-10652 | Analyzed | 未確認 | CWE-125 | Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TTL, rdlength) |
| CVE-2026-10653 | Modified | 未確認 | CWE-415 | The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of each variable/he |
| CVE-2026-10654 | Analyzed | 未確認 | CWE-362 | A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect. When the loc |
| CVE-2026-10655 | Analyzed | 未確認 | CWE-416 | The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediately after detac |
| CVE-2026-10658 | Modified | 未確認 | CWE-125, CWE-787 | bt_iso_recv() in subsys/bluetooth/host/iso.c pulled the ISO SDU header (4 bytes) or, when the timestamp flag is set, the timestamped SDU header (8 bytes) from the inbound HCI ISO D |
| CVE-2026-10661 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Impacted is the function Open of the file src/blender_mcp/server.py. The mani |
| CVE-2026-10662 | Deferred | 未確認 | CWE-918 | A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blender_mcp/serv |
| CVE-2026-10676 | Rejected | 未確認 | Rejected reason: This CVE Record has been rejected by the Zephyr Project CNA. Subsequent analysis determined that the addressed defect is not reachable in any released version of Z | |
| CVE-2026-10687 | Rejected | 未確認 | Rejected reason: This CVE Record has been rejected by the Zephyr Project CNA. Subsequent analysis, confirmed with the fix author, determined that the addressed defect does not appl | |
| CVE-2026-10688 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The impacted element is the function execute_blender_code of the file /src/bl |
| CVE-2026-10690 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37. This affects the function readFileFromUrl of the file src/tools/filesystem.ts of the component read_file. |
| CVE-2026-10691 | Deferred | 未確認 | CWE-1333, CWE-400 | A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38. This impacts an unknown function of the file src/search-manager.ts of the component start_sear |
| CVE-2026-10692 | Deferred | 未確認 | CWE-1333, CWE-400 | A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0. Affected is the function is_safe_regex_pattern of the component search_code_advanced. Executing a manipu |
| CVE-2026-10693 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the component Adminis |
| CVE-2026-10694 | Deferred | 未確認 | CWE-73 | A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argum |
| CVE-2026-10696 | Analyzed | 未確認 | CWE-706 | Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier allows a WinGet community catalog contributor to cause an inst |
| CVE-2026-10701 | Modified | 未確認 | CWE-119, CWE-131 | Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3. |
| CVE-2026-10702 | Modified | 未確認 | CWE-733, CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. |
| CVE-2026-10703 | Deferred | 未確認 | CWE-119, CWE-416 | A security vulnerability has been detected in EIPStackGroup OpENer up to 2.3.0. Affected is the function CreateMessageRouterRequestStructure of the file cipmessagerouter.c of the c |
| CVE-2026-10704 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the co |
| CVE-2026-10705 | Deferred | 未確認 | CWE-400, CWE-404 | A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipula |
| CVE-2026-10711 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Cons |
| CVE-2026-10712 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have |
| CVE-2026-10715 | Deferred | 未確認 | CWE-862 | Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary post_id |
| CVE-2026-10717 | Awaiting Analysis | 未確認 | CWE-787 | Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds |
| CVE-2026-10718 | Awaiting Analysis | 未確認 | CWE-787 | Out of bounds write in openSeaChest’s Trim/Unmap operation in Seagate’s openSeaChest v26.03.0 on all supported platforms allows for writing extra memory describing a range of LBAs |
| CVE-2026-10719 | Awaiting Analysis | 未確認 | CWE-787 | Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing 1 extra byte outside of allocated memo |
| CVE-2026-10720 | Deferred | 未確認 | CWE-23 | Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate (suc |
| CVE-2026-10721 | Deferred | 未確認 | CWE-502 | Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger |
| CVE-2026-10722 | Analyzed | 未確認 | CWE-189, CWE-190 | A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromR |
| CVE-2026-10725 | Analyzed | 未確認 | CWE-409 | Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can exp |
| CVE-2026-10727 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root |
| CVE-2026-10729 | Deferred | 未確認 | CWE-74 | An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface |
| CVE-2026-10731 | Deferred | 未確認 | CWE-89 | SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication (2FA) fun |
| CVE-2026-10732 | Awaiting Analysis | 未確認 | CWE-22, CWE-29 | All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two entries with the same p |
| CVE-2026-10733 | Analyzed | 未確認 | CWE-1021 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticate |
| CVE-2026-10735 | Deferred | 未確認 | Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3. | |
| CVE-2026-10736 | Deferred | 未確認 | CWE-89 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 3.9. |
| CVE-2026-10737 | Deferred | 未確認 | CWE-862 | The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and i |
| CVE-2026-10738 | Deferred | 未確認 | CWE-79 | The jQuery Hover Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax) in all versions up to, and including, 1.4 due |
| CVE-2026-10740 | Awaiting Analysis | 未確認 | CWE-770 | Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may allow an unauthenticated remote actor to cause a denial of service (degraded availability) |
| CVE-2026-10741 | Analyzed | 未確認 | CWE-863 | Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to di |
| CVE-2026-10745 | Deferred | 未確認 | CWE-117 | Improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows allows Log Injection-Tampering-Forging. This issue affects |
| CVE-2026-10746 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-10748 | Analyzed | 未確認 | CWE-502 | An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in |
| CVE-2026-10749 | Deferred | 未確認 | The Post Duplicator WordPress plugin before 3.0.15 does not safely handle custom meta-data during post duplication, storing attacker-supplied serialized values without the WordPres | |
| CVE-2026-10753 | Deferred | 未確認 | The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been grante | |
| CVE-2026-10763 | Deferred | 未確認 | PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server. | |
| CVE-2026-10766 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the component |
| CVE-2026-10771 | Deferred | 未確認 | CWE-918 | A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil. |
| CVE-2026-10775 | Analyzed | 未確認 | CWE-404 | A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes |
| CVE-2026-10777 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Affected by this issue is some unknown functionality of the fi |
| CVE-2026-10779 | Deferred | 未確認 | CWE-862 | The Classified Listing – Classified ads & Business Directory plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.4.2. This is due to |
| CVE-2026-10780 | Deferred | 未確認 | CWE-639 | The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the static_block_content() shortco |
| CVE-2026-10783 | Analyzed | 未確認 | CWE-327, CWE-328 | A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation r |
| CVE-2026-10786 | Analyzed | 未確認 | CWE-312 | Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext credentials for configured ticke |
| CVE-2026-10787 | Analyzed | 未確認 | CWE-862 | Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user to enumerate metadata of deleted user groups via a crafted AP |
| CVE-2026-10789 | Analyzed | 未確認 | CWE-94 | A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that coul |
| CVE-2026-10795 | Deferred | 未確認 | CWE-347 | The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.26.4 via the UpdraftPlus_Remote_Co |
| CVE-2026-10796 | Analyzed | 未確認 | CWE-78 | nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configured Node.js/io.js mirror. Commands such as `nvm install` read the |
| CVE-2026-10800 | Deferred | 未確認 | CWE-327, CWE-328 | A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_features of the file fastdeploy/multimodal/hasher.py of the compo |
| CVE-2026-10801 | Deferred | 未確認 | CWE-327, CWE-328 | A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_pil_image of the file swift/template/base.py of the componen |
| CVE-2026-10802 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the |
| CVE-2026-10803 | Analyzed | 未確認 | CWE-327, CWE-328 | A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Compu |
| CVE-2026-10804 | Analyzed | 未確認 | CWE-327, CWE-328 | A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. |
| CVE-2026-10805 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Descripti |
| CVE-2026-10806 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in mjperpinosa stumasy. The affected element is an unknown function of the file application/PHP/objects/updates/add_post.php. Performing a manipulation of |
| CVE-2026-10807 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/change_profile_image.php. Executing |
| CVE-2026-10808 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /manage_student.php. The manipulation of the argument ID lea |
| CVE-2026-10809 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manage_user.php. The manipulation of the argument ID r |
| CVE-2026-10810 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page cau |
| CVE-2026-10811 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such man |
| CVE-2026-10812 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component |
| CVE-2026-10813 | Deferred | 未確認 | CWE-327, CWE-328 | A flaw has been found in LMCache up to 0.5.4. This affects the function hex_hash_to_int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing |
| CVE-2026-10814 | Analyzed | 未確認 | CWE-327, CWE-328 | A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kv_catalog.go of the component |
| CVE-2026-10815 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was found in LakshayD02 Hostel-Management-System-PHP up to f87e67c283bab6f718faf2fec6ae39a13bd7036b. This issue affects some unknown processing of the file hostel/i |
| CVE-2026-10816 | Analyzed | 未確認 | CWE-610, CWE-73 | Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled |
| CVE-2026-10817 | Analyzed | 未確認 | CWE-125 | Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual se |
| CVE-2026-10820 | Deferred | 未確認 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.16.17 does not verify that the user performing | |
| CVE-2026-10823 | Deferred | 未確認 | The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints and does not validate a user-supplied query parameter, allowing un | |
| CVE-2026-10824 | Deferred | 未確認 | The Masteriyo LMS WordPress plugin before 2.2.1 does not perform authorization checks in a course-progress REST API controller, allowing unauthenticated users to read and permanen | |
| CVE-2026-10825 | Awaiting Analysis | 未確認 | CWE-1287 | A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a |
| CVE-2026-10828 | Awaiting Analysis | 未確認 | CWE-134 | A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vul |
| CVE-2026-10829 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validat |
| CVE-2026-10831 | Awaiting Analysis | 未確認 | CWE-862 | A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender |
| CVE-2026-10833 | Deferred | 未確認 | CWE-79 | The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'configurablePrefix' Block A |
| CVE-2026-10835 | Deferred | 未確認 | The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly sanitise and escape a parameter passed to one of its AJAX actions before using it in a SQL statement, and | |
| CVE-2026-10836 | Deferred | 未確認 | CWE-644 | Improper handling of HTTP headers that allows a remote attacker to manipulate the value of the Host header using specially crafted requests. A successful exploit could result in th |
| CVE-2026-10837 | Deferred | 未確認 | CWE-601 | Open redirection vulnerability due to insufficient validation of the X-Forwarded-Host HTTP header. An attacker could create manipulated links that, when opened by a victim, cause t |
| CVE-2026-10839 | Deferred | 未確認 | CWE-601 | Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the applicati |
| CVE-2026-10840 | Awaiting Analysis | 未確認 | CWE-732 | A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manag |
| CVE-2026-10843 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are provisioned with account-wide scope for destructive actions rat |
| CVE-2026-10845 | Analyzed | 未確認 | CWE-287 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications. |
| CVE-2026-10846 | Analyzed | 未確認 | CWE-346 | NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the resp |
| CVE-2026-10847 | Deferred | 未確認 | CWE-427 | A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM p |
| CVE-2026-10850 | Analyzed | 未確認 | CWE-79 | Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the description_html field when creating an intake work item through the API v1 intake endpoint |
| CVE-2026-10852 | Modified | 未確認 | CWE-476 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can |
| CVE-2026-10854 | Analyzed | 未確認 | CWE-200 | A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxies belonging to other organisations. The event template buil |
| CVE-2026-10855 | Analyzed | 未確認 | CWE-862 | An authorization flaw existed in the MISP Event Template Importer overwrite workflow. When importing an event template in overwrite mode, the application checked whether a matching |
| CVE-2026-10856 | Analyzed | 未確認 | CWE-601 | A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external U |
| CVE-2026-10857 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. E-Commerce allows |
| CVE-2026-10860 | Analyzed | 未確認 | CWE-863 | A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the dele |
| CVE-2026-10861 | Analyzed | 未確認 | CWE-601 | An open redirect vulnerability existed in MISP UsersController::routeafterlogin() because the value stored in the pre_login_requested_url session key was used as the post-login red |
| CVE-2026-10862 | Deferred | 未確認 | CWE-79 | The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all versions up to, and including, 2.3.23 due to insufficient input |
| CVE-2026-10863 | Analyzed | 未確認 | CWE-20 | A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted from user-controlled named request parameters. This allowed an |
| CVE-2026-10864 | Analyzed | 未確認 | CWE-200 | A vulnerability in the MISP dashboard widgets allowed an authenticated user to manipulate the fields option and influence which fields were returned by the New Users and New Organi |
| CVE-2026-10868 | Deferred | 未確認 | CWE-269 | A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplied fields in UsersController::edit(). When processing edit re |
| CVE-2026-10870 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injection. |
| CVE-2026-10871 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulation |
| CVE-2026-10872 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation result |
| CVE-2026-10873 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead t |
| CVE-2026-10874 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation |
| CVE-2026-10875 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulat |
| CVE-2026-10876 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument p |
| CVE-2026-10877 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the co |
| CVE-2026-10878 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument acti |
| CVE-2026-10879 | Analyzed | 未確認 | CWE-787 | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered |
| CVE-2026-10880 | Awaiting Analysis | 未確認 | CWE-89 | OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowi |
| CVE-2026-10881 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-10882 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical |
| CVE-2026-10883 | Analyzed | 未確認 | CWE-787 | Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit |
| CVE-2026-10884 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-10885 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security seve |
| CVE-2026-10886 | Analyzed | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s |
| CVE-2026-10887 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security se |
| CVE-2026-10888 | Analyzed | 未確認 | CWE-416 | Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. ( |
| CVE-2026-10889 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-10890 | Analyzed | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic |
| CVE-2026-10891 | Analyzed | 未確認 | CWE-416 | Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-10892 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-10893 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: |
| CVE-2026-10894 | Analyzed | 未確認 | CWE-416 | Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-10895 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) |
| CVE-2026-10896 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security seve |
| CVE-2026-10897 | Analyzed | 未確認 | CWE-787 | Inappropriate implementation in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-10898 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-10899 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit hea |
| CVE-2026-10900 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit h |
| CVE-2026-10901 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary cod |
| CVE-2026-10902 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) |
| CVE-2026-10903 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-10904 | Analyzed | 未確認 | CWE-119, CWE-20, CWE-94 | Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-10905 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c |
| CVE-2026-10906 | Analyzed | 未確認 | CWE-416 | Use after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit |
| CVE-2026-10907 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security se |
| CVE-2026-10908 | Analyzed | 未確認 | CWE-416 | Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-10909 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-10910 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-10911 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-10912 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same o |
| CVE-2026-10913 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-10914 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-10915 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-10916 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to inject arbitrar |
| CVE-2026-10917 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-10918 | Analyzed | 未確認 | CWE-416 | Use after free in Viz in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-10919 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-10920 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebShare in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentia |
| CVE-2026-10921 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-10922 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to b |
| CVE-2026-10923 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security seve |
| CVE-2026-10924 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-10925 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-10926 | Analyzed | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium s |
| CVE-2026-10927 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-10928 | Analyzed | 未確認 | CWE-94 | Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-10929 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-10930 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium secu |
| CVE-2026-10931 | Analyzed | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s |
| CVE-2026-10932 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-10933 | Analyzed | 未確認 | CWE-416 | Use after free in Audio in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-10934 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-10935 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-10936 | Analyzed | 未確認 | CWE-843 | Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-10937 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-10938 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a craf |
| CVE-2026-10939 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-10940 | Analyzed | 未確認 | CWE-362 | Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c |
| CVE-2026-10941 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-10942 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium secur |
| CVE-2026-10943 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-10944 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-10945 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sa |
| CVE-2026-10946 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code ins |
| CVE-2026-10947 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-10948 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-10949 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-10950 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-10951 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit he |
| CVE-2026-10952 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium |
| CVE-2026-10953 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-10954 | Analyzed | 未確認 | CWE-416 | Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-10955 | Modified | 未確認 | CWE-843 | Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Ch |
| CVE-2026-10956 | Analyzed | 未確認 | CWE-416 | Use after free in MimeHandlerView in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-10957 | Analyzed | 未確認 | CWE-416 | Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-10958 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrar |
| CVE-2026-10959 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-10960 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-10961 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-10962 | Analyzed | 未確認 | CWE-843 | Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-10963 | Analyzed | 未確認 | CWE-472 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-10964 | Analyzed | 未確認 | CWE-472 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-10965 | Analyzed | 未確認 | CWE-472 | Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-10966 | Modified | 未確認 | CWE-20 | Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium |
| CVE-2026-10967 | Analyzed | 未確認 | CWE-416 | Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sand |
| CVE-2026-10968 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cro |
| CVE-2026-10969 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privi |
| CVE-2026-10970 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in InterestGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potential |
| CVE-2026-10971 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to pote |
| CVE-2026-10972 | Modified | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi |
| CVE-2026-10973 | Modified | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-10974 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-10975 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-10976 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-10977 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML pa |
| CVE-2026-10978 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium securit |
| CVE-2026-10979 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pag |
| CVE-2026-10980 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same ori |
| CVE-2026-10981 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin |
| CVE-2026-10982 | Analyzed | 未確認 | CWE-416 | Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-10983 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page |
| CVE-2026-10984 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium |
| CVE-2026-10985 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-10986 | Analyzed | 未確認 | CWE-472 | Integer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security seve |
| CVE-2026-10987 | Analyzed | 未確認 | CWE-472 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-10988 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-10989 | Analyzed | 未確認 | CWE-122 | Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit h |
| CVE-2026-10990 | Modified | 未確認 | CWE-416 | Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-10991 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a san |
| CVE-2026-10992 | Modified | 未確認 | CWE-20 | Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a cr |
| CVE-2026-10993 | Modified | 未確認 | CWE-122 | Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pa |
| CVE-2026-10994 | Modified | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page |
| CVE-2026-10995 | Modified | 未確認 | CWE-122 | Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit hea |
| CVE-2026-10996 | Modified | 未確認 | CWE-346 | Inappropriate implementation in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security s |
| CVE-2026-10997 | Modified | 未確認 | CWE-732 | Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretion |
| CVE-2026-10998 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network t |
| CVE-2026-10999 | Modified | 未確認 | CWE-125, CWE-190, CWE-787 | Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive info |
| CVE-2026-11000 | Analyzed | 未確認 | CWE-416 | Use after free in Fonts in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-11001 | Modified | 未確認 | CWE-290, CWE-451 | Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoo |
| CVE-2026-11002 | Modified | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-11003 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-11004 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information f |
| CVE-2026-11005 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive in |
| CVE-2026-11006 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security sev |
| CVE-2026-11007 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak |
| CVE-2026-11008 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cros |
| CVE-2026-11009 | Analyzed | 未確認 | CWE-416 | Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi |
| CVE-2026-11010 | Analyzed | 未確認 | CWE-416 | Use after free in WebShare in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-11011 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolat |
| CVE-2026-11012 | Analyzed | 未確認 | CWE-416 | Use after free in Serial in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-11013 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potential |
| CVE-2026-11014 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass site isola |
| CVE-2026-11015 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security s |
| CVE-2026-11016 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same orig |
| CVE-2026-11017 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restric |
| CVE-2026-11018 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium secu |
| CVE-2026-11019 | Analyzed | 未確認 | CWE-290, CWE-451 | Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform domain spo |
| CVE-2026-11020 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. (Chromium security se |
| CVE-2026-11021 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potential |
| CVE-2026-11022 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same ori |
| CVE-2026-11023 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin poli |
| CVE-2026-11024 | Analyzed | 未確認 | CWE-121 | Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security |
| CVE-2026-11025 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page |
| CVE-2026-11026 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation re |
| CVE-2026-11027 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin d |
| CVE-2026-11028 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code i |
| CVE-2026-11029 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to |
| CVE-2026-11030 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security |
| CVE-2026-11031 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffi |
| CVE-2026-11032 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu |
| CVE-2026-11033 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HT |
| CVE-2026-11034 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) |
| CVE-2026-11035 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a crafted XML file. (Chr |
| CVE-2026-11036 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in DOM in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security sever |
| CVE-2026-11037 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security |
| CVE-2026-11038 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Subresource Integrity in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via malicious network t |
| CVE-2026-11039 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-11040 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-11041 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potenti |
| CVE-2026-11042 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrupt |
| CVE-2026-11043 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-11044 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTM |
| CVE-2026-11045 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially s |
| CVE-2026-11046 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary |
| CVE-2026-11047 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a |
| CVE-2026-11048 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass same origin p |
| CVE-2026-11049 | Analyzed | 未確認 | CWE-416 | Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-11050 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi |
| CVE-2026-11051 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-11052 | Analyzed | 未確認 | CWE-843 | Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-11054 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-11055 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-11056 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to |
| CVE-2026-11057 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fro |
| CVE-2026-11058 | Analyzed | 未確認 | CWE-472 | Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform OS-level pri |
| CVE-2026-11059 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-11060 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-11061 | Analyzed | 未確認 | CWE-125, CWE-416 | Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-11062 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject scripts or |
| CVE-2026-11063 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potenti |
| CVE-2026-11064 | Analyzed | 未確認 | CWE-457 | Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. |
| CVE-2026-11065 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-11066 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-11067 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-11068 | Analyzed | 未確認 | CWE-416 | Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-11069 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium |
| CVE-2026-11070 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the network process to pot |
| CVE-2026-11071 | Analyzed | 未確認 | CWE-416 | Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informati |
| CVE-2026-11072 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: M |
| CVE-2026-11073 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. ( |
| CVE-2026-11074 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: |
| CVE-2026-11075 | Analyzed | 未確認 | CWE-125 | Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-11076 | Analyzed | 未確認 | CWE-843 | Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-11077 | Analyzed | 未確認 | CWE-125 | Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: |
| CVE-2026-11078 | Analyzed | 未確認 | CWE-20, CWE-284 | Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy v |
| CVE-2026-11079 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory write via a crafted video |
| CVE-2026-11080 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium sec |
| CVE-2026-11081 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security se |
| CVE-2026-11082 | Analyzed | 未確認 | CWE-416 | Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-11083 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu |
| CVE-2026-11084 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu |
| CVE-2026-11085 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Ch |
| CVE-2026-11086 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a s |
| CVE-2026-11087 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML p |
| CVE-2026-11088 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c |
| CVE-2026-11089 | Analyzed | 未確認 | CWE-457, CWE-908 | Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fr |
| CVE-2026-11090 | Analyzed | 未確認 | CWE-125, CWE-457, CWE-787 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-11091 | Analyzed | 未確認 | CWE-125, CWE-787 | Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. ( |
| CVE-2026-11092 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to perform privilege e |
| CVE-2026-11093 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Printing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a |
| CVE-2026-11094 | Analyzed | 未確認 | CWE-416 | Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-11095 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perfo |
| CVE-2026-11096 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pa |
| CVE-2026-11097 | Analyzed | 未確認 | CWE-474 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-11098 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin da |
| CVE-2026-11100 | Analyzed | 未確認 | CWE-416 | Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform |
| CVE-2026-11101 | Modified | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit |
| CVE-2026-11102 | Modified | 未確認 | CWE-474 | Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. |
| CVE-2026-11103 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. |
| CVE-2026-11104 | Modified | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fr |
| CVE-2026-11105 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin |
| CVE-2026-11106 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-11107 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-11108 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium |
| CVE-2026-11109 | Modified | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-11110 | Modified | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-11111 | Modified | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security se |
| CVE-2026-11112 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to pote |
| CVE-2026-11113 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-11114 | Modified | 未確認 | CWE-416 | Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-11115 | Modified | 未確認 | CWE-416 | Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium secur |
| CVE-2026-11116 | Modified | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: |
| CVE-2026-11117 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: |
| CVE-2026-11118 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-11119 | Modified | 未確認 | CWE-20 | Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a s |
| CVE-2026-11120 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to pot |
| CVE-2026-11121 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin d |
| CVE-2026-11122 | Analyzed | 未確認 | CWE-358 | Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chro |
| CVE-2026-11123 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page |
| CVE-2026-11124 | Analyzed | 未確認 | CWE-122 | Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi |
| CVE-2026-11125 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-11126 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data |
| CVE-2026-11127 | Analyzed | 未確認 | CWE-358 | Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted WebAPK. (Chromium secu |
| CVE-2026-11128 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Web Share in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-ori |
| CVE-2026-11129 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s |
| CVE-2026-11130 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-11131 | Modified | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-11132 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-11133 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-11134 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-11135 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chrom |
| CVE-2026-11136 | Analyzed | 未確認 | CWE-416 | Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-11137 | Modified | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page |
| CVE-2026-11138 | Modified | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-11139 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-11140 | Modified | 未確認 | CWE-20 | Out of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informat |
| CVE-2026-11141 | Modified | 未確認 | CWE-457 | Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fr |
| CVE-2026-11142 | Analyzed | 未確認 | CWE-639 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-11143 | Modified | 未確認 | CWE-122 | Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially se |
| CVE-2026-11144 | Modified | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security se |
| CVE-2026-11145 | Modified | 未確認 | CWE-362 | Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Med |
| CVE-2026-11146 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-11147 | Analyzed | 未確認 | CWE-416 | Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-11148 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium se |
| CVE-2026-11149 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privi |
| CVE-2026-11150 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-11151 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potenti |
| CVE-2026-11152 | Analyzed | 未確認 | CWE-416 | Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security |
| CVE-2026-11153 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-11154 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-11155 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-11156 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-11157 | Analyzed | 未確認 | CWE-94 | Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or H |
| CVE-2026-11158 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to potentially perform a sandbox escape via a crafte |
| CVE-2026-11159 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-11160 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-11161 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-11162 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-11163 | Analyzed | 未確認 | CWE-416 | Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-11164 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-11165 | Analyzed | 未確認 | CWE-416 | Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi |
| CVE-2026-11166 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-11167 | Analyzed | 未確認 | CWE-250 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-11168 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitiv |
| CVE-2026-11169 | Analyzed | 未確認 | CWE-91 | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted XML file. (Chromium s |
| CVE-2026-11170 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level privilege escalation via malicious network |
| CVE-2026-11171 | Analyzed | 未確認 | CWE-472 | Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-11172 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium secur |
| CVE-2026-11173 | Analyzed | 未確認 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via |
| CVE-2026-11174 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation v |
| CVE-2026-11175 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security se |
| CVE-2026-11176 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-11177 | Analyzed | 未確認 | CWE-416 | Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corru |
| CVE-2026-11178 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium |
| CVE-2026-11179 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: |
| CVE-2026-11180 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-11181 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium secu |
| CVE-2026-11182 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-11183 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file |
| CVE-2026-11184 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium secu |
| CVE-2026-11185 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox vi |
| CVE-2026-11186 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-11187 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security |
| CVE-2026-11188 | Analyzed | 未確認 | CWE-416 | Use after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi |
| CVE-2026-11189 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass n |
| CVE-2026-11190 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary |
| CVE-2026-11191 | Analyzed | 未確認 | CWE-125 | Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. ( |
| CVE-2026-11192 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffi |
| CVE-2026-11193 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page |
| CVE-2026-11194 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-11195 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin |
| CVE-2026-11196 | Analyzed | 未確認 | CWE-843 | Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. (Chr |
| CVE-2026-11197 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy v |
| CVE-2026-11198 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video f |
| CVE-2026-11199 | Modified | 未確認 | CWE-20 | Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to leak cross-origin data via malicious network |
| CVE-2026-11200 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-11201 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a cr |
| CVE-2026-11202 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p |
| CVE-2026-11203 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s |
| CVE-2026-11204 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium |
| CVE-2026-11205 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI |
| CVE-2026-11206 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu |
| CVE-2026-11207 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via malicious netwo |
| CVE-2026-11208 | Analyzed | 未確認 | CWE-416 | Use after free in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-11209 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive |
| CVE-2026-11210 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. (Chro |
| CVE-2026-11211 | Analyzed | 未確認 | CWE-472 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-11212 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin d |
| CVE-2026-11213 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially |
| CVE-2026-11214 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium |
| CVE-2026-11215 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium |
| CVE-2026-11216 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing |
| CVE-2026-11217 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi |
| CVE-2026-11218 | Analyzed | 未確認 | CWE-20, CWE-94 | Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestu |
| CVE-2026-11219 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se |
| CVE-2026-11220 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site i |
| CVE-2026-11221 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in PointerLock in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI s |
| CVE-2026-11222 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity |
| CVE-2026-11223 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same orig |
| CVE-2026-11224 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security |
| CVE-2026-11225 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security sev |
| CVE-2026-11226 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in PreviewTab in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to |
| CVE-2026-11227 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security |
| CVE-2026-11228 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI sp |
| CVE-2026-11229 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. (Chro |
| CVE-2026-11230 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-11231 | Analyzed | 未確認 | CWE-94 | Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium sec |
| CVE-2026-11232 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security |
| CVE-2026-11233 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin pol |
| CVE-2026-11234 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via |
| CVE-2026-11235 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code |
| CVE-2026-11236 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Web Bluetooth in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a |
| CVE-2026-11237 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofin |
| CVE-2026-11238 | Analyzed | 未確認 | CWE-306 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sen |
| CVE-2026-11239 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalatio |
| CVE-2026-11240 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isola |
| CVE-2026-11241 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform privilege escalation via a cr |
| CVE-2026-11242 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origi |
| CVE-2026-11243 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium sec |
| CVE-2026-11244 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass |
| CVE-2026-11245 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severi |
| CVE-2026-11246 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in IndexedDB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same or |
| CVE-2026-11247 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chrom |
| CVE-2026-11248 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium s |
| CVE-2026-11249 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fro |
| CVE-2026-11250 | Analyzed | 未確認 | CWE-416 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive |
| CVE-2026-11251 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass discretiona |
| CVE-2026-11252 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page |
| CVE-2026-11253 | Analyzed | 未確認 | CWE-362 | Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-11254 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sev |
| CVE-2026-11255 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak |
| CVE-2026-11256 | Analyzed | 未確認 | CWE-125 | Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-11257 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Browser in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium secur |
| CVE-2026-11258 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in File System Access in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypas |
| CVE-2026-11259 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium |
| CVE-2026-11260 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium s |
| CVE-2026-11261 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted |
| CVE-2026-11262 | Analyzed | 未確認 | CWE-416 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-11263 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in WebAuthentication in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak c |
| CVE-2026-11264 | Analyzed | 未確認 | CWE-693 | Policy bypass in Content Security Policy in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium secu |
| CVE-2026-11265 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-11266 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in SafeBrowsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass Safe Browsing via a malicious file. (Chromium security seve |
| CVE-2026-11267 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass content se |
| CVE-2026-11268 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severi |
| CVE-2026-11269 | Analyzed | 未確認 | CWE-829 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to execute arbitrary code inside a sandbox v |
| CVE-2026-11270 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit |
| CVE-2026-11271 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-ori |
| CVE-2026-11272 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI ge |
| CVE-2026-11273 | Analyzed | 未確認 | CWE-20, CWE-79 | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to in |
| CVE-2026-11274 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in DOM Distiller in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (C |
| CVE-2026-11275 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Page Info in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation |
| CVE-2026-11276 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass discretionary access control via malicious n |
| CVE-2026-11277 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML |
| CVE-2026-11278 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium |
| CVE-2026-11279 | Analyzed | 未確認 | CWE-125 | Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-11280 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security s |
| CVE-2026-11281 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a cra |
| CVE-2026-11282 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag |
| CVE-2026-11283 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a malicious f |
| CVE-2026-11284 | Analyzed | 未確認 | CWE-1300, CWE-203 | Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-11285 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-11286 | Analyzed | 未確認 | CWE-20, CWE-451 | Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofi |
| CVE-2026-11287 | Analyzed | 未確認 | CWE-20, CWE-602 | Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass naviga |
| CVE-2026-11288 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-11289 | Analyzed | 未確認 | CWE-1300, CWE-203 | Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-11290 | Analyzed | 未確認 | CWE-190, CWE-472 | Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a malicious file. (Chromium security severi |
| CVE-2026-11291 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Android Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
| CVE-2026-11292 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium secu |
| CVE-2026-11293 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-11294 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-11295 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chrom |
| CVE-2026-11296 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalat |
| CVE-2026-11297 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malici |
| CVE-2026-11298 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chrom |
| CVE-2026-11299 | Analyzed | 未確認 | CWE-125, CWE-190 | Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-11300 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sev |
| CVE-2026-11301 | Analyzed | 未確認 | CWE-125 | Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious netwo |
| CVE-2026-11302 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML |
| CVE-2026-11303 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sev |
| CVE-2026-11304 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severit |
| CVE-2026-11305 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sev |
| CVE-2026-11306 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sev |
| CVE-2026-11307 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sev |
| CVE-2026-11308 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to perform privilege es |
| CVE-2026-11309 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security seve |
| CVE-2026-11310 | Analyzed | 未確認 | CWE-295 | X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra (OPENSSL_EXTRA) and who |
| CVE-2026-11311 | Analyzed | 未確認 | CWE-74, CWE-76 | When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gateway Fabric. |
| CVE-2026-11312 | Deferred | 未確認 | CWE-404, CWE-407 | A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler |
| CVE-2026-11317 | Awaiting Analysis | 未確認 | CWE-404 | A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are |
| CVE-2026-11322 | Deferred | 未確認 | CWE-59 | Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or direct |
| CVE-2026-11326 | Deferred | 未確認 | CWE-284 | OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to |
| CVE-2026-11329 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onn |
| CVE-2026-11330 | Deferred | 未確認 | CWE-327, CWE-328 | A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observation |
| CVE-2026-11332 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralizati |
| CVE-2026-11333 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. The impacted |
| CVE-2026-11334 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown fun |
| CVE-2026-11335 | Deferred | 未確認 | CWE-384 | A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This impacts the function session_ |
| CVE-2026-11336 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected is an unknown fu |
| CVE-2026-11337 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected by this vulnerability |
| CVE-2026-11338 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. Th |
| CVE-2026-11339 | Analyzed | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument us |
| CVE-2026-11341 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_val |
| CVE-2026-11342 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argume |
| CVE-2026-11344 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. |
| CVE-2026-11345 | Deferred | 未確認 | CWE-287 | An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAcce |
| CVE-2026-11346 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By craftin |
| CVE-2026-11347 | Deferred | 未確認 | CWE-321, CWE-338 | The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization |
| CVE-2026-11356 | Deferred | 未確認 | CWE-79 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings in all versions up |
| CVE-2026-11357 | Deferred | 未確認 | CWE-200 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.7.5 via |
| CVE-2026-11358 | Deferred | 未確認 | CWE-79 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in a |
| CVE-2026-11360 | Deferred | 未確認 | CWE-89 | The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4.0.1 |
| CVE-2026-11362 | Analyzed | 未確認 | CWE-150, CWE-93 | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data |
| CVE-2026-11364 | Deferred | 未確認 | CWE-862 | The Product Specifications for WooCommerce plugin for WordPress is vulnerable to unauthorized modification, creation, and deletion of data in versions up to and including 0.8.9. Th |
| CVE-2026-11367 | Deferred | 未確認 | CWE-22 | The PixMagix – WordPress Image Editor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.2 via the move_image_on_server function. T |
| CVE-2026-11369 | Deferred | 未確認 | CWE-639 | The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the obje |
| CVE-2026-11370 | Deferred | 未確認 | CWE-918 | The WP Meta SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.5.18 via the 'new_link' parameter. This makes it possible |
| CVE-2026-11372 | Analyzed | 未確認 | CWE-79 | IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in th |
| CVE-2026-11373 | Deferred | 未確認 | CWE-150, CWE-93 | Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Statsite::Client is a client for the statsite protocol, which is a variant of statsd. Newlines |
| CVE-2026-11374 | Awaiting Analysis | 未確認 | CWE-287, CWE-330, CWE-340 | In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unau |
| CVE-2026-11379 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in D |
| CVE-2026-11393 | Awaiting Analysis | 未確認 | CWE-94 | Improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2 might allow an authenticated remote threat actor to execute arbitra |
| CVE-2026-11395 | Deferred | 未確認 | CWE-918 | The CF7 to Webhook plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.0 via the pull_the_trigger. This makes it possible fo |
| CVE-2026-11400 | Awaiting Analysis | 未確認 | CWE-426 | An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to es |
| CVE-2026-11401 | Awaiting Analysis | 未確認 | CWE-426 | An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to esca |
| CVE-2026-11402 | Deferred | 未確認 | CWE-79 | The Services Section Block – Showcase Service Details in Grid or Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'link' Block Attribute in all version |
| CVE-2026-11406 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. Thi |
| CVE-2026-11407 | Deferred | 未確認 | CWE-1336 | Pimcore CMS/DXP version 12.3.8 contains a sandbox bypass vulnerability that allows authenticated administrative attackers to execute arbitrary methods on PHP objects by exploiting |
| CVE-2026-11408 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endpoin |
| CVE-2026-11409 | Analyzed | 未確認 | CWE-78 | An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with admi |
| CVE-2026-11410 | Analyzed | 未確認 | CWE-78 | An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attack |
| CVE-2026-11411 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDir of the component chatpdf.pro. Performing a manipulation of |
| CVE-2026-11412 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the a |
| CVE-2026-11413 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipul |
| CVE-2026-11414 | Analyzed | 未確認 | CWE-22, CWE-798 | A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauth |
| CVE-2026-11416 | Deferred | 未確認 | CWE-22 | MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where the local destination path is constructed by concatenating |
| CVE-2026-11417 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2.245.0 (2.246.0 on Windows) might allow an actor who controls the value of one or more bun |
| CVE-2026-11419 | Analyzed | 未確認 | CWE-22, CWE-434 | A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper validation of a user-controlled path component in image upload |
| CVE-2026-11420 | Analyzed | 未確認 | CWE-22, CWE-306 | Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary files to any w |
| CVE-2026-11422 | Awaiting Analysis | 未確認 | CWE-95 | Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom rendering pipeline that allows attackers to execute arbitrary J |
| CVE-2026-11423 | Awaiting Analysis | 未確認 | CWE-22, CWE-269 | A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of user-supplied filenames in the MCAD and Simulation file down |
| CVE-2026-11424 | Awaiting Analysis | 未確認 | CWE-200, CWE-918 | A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can submit a reque |
| CVE-2026-11429 | Awaiting Analysis | 未確認 | CWE-22, CWE-306 | Two endpoints in the Vault Service ScriptsController, shared by Altium Enterprise Server and Altium 365, accept file uploads where a user-supplied filename component is used to con |
| CVE-2026-11431 | Awaiting Analysis | 未確認 | CWE-200, CWE-22 | A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path p |
| CVE-2026-11434 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cr |
| CVE-2026-11435 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sq |
| CVE-2026-11436 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component Sig |
| CVE-2026-11437 | Deferred | 未確認 | CWE-918 | A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing |
| CVE-2026-11438 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argument |
| CVE-2026-11439 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The |
| CVE-2026-11440 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of the file /repositories/{projectId}/default-branch of the component REST API. This m |
| CVE-2026-11441 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in theonedev onedev up to 15.0.5. This vulnerability affects the function canAccessIssue of the file /issues/ of the component Pull Request Handler. |
| CVE-2026-11442 | Deferred | 未確認 | CWE-22 | Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installation |
| CVE-2026-11443 | Deferred | 未確認 | CWE-79 | Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to execute arbitrary script on affected installation |
| CVE-2026-11447 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function iwinfo_backend of the file iwinfo.so of the component MTK Backend. The manipulation o |
| CVE-2026-11448 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation |
| CVE-2026-11449 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in GL.iNet GL-MT3000 4.4.5. The impacted element is the function rpc_sys of the file /cgi-bin/luci/rpc of the component LuCI JSON-RPC Int |
| CVE-2026-11450 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Perfor |
| CVE-2026-11451 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler. Executing a manipulation of the |
| CVE-2026-11452 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function FUN_0042e200 of the file /cgi-bin/glc of the component SET_USER_PWD Handler. The manipulat |
| CVE-2026-11453 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Tiobon Employee Self-Service System up to 7.2. Affected by this vulnerability is an unknown functionality of the file /Blog/BlogSearch.aspx of the comp |
| CVE-2026-11455 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. Affected by this issue is the function check_cmd_exists of the file metagpt/utils/common.py. This manipulati |
| CVE-2026-11456 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php of the component HTTP GET Request Handler. Such manipulatio |
| CVE-2026-11457 | Deferred | 未確認 | CWE-707, CWE-74 | A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This vulnerability affects unknown code of the file /base-boot/jmreport/tes |
| CVE-2026-11458 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of th |
| CVE-2026-11459 | Deferred | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The man |
| CVE-2026-11460 | Deferred | 未確認 | CWE-1287, CWE-20 | A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown function. This manipulation causes improper validation of specified type of input. It is |
| CVE-2026-11461 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in NousResearch hermes-agent up to 0.12.0. This affects the function resolve_session_by_title of the file hermes_state.py of the component resume End |
| CVE-2026-11462 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This impacts the function callback of the file plugins/Stripe/Controllers/StripeControll |
| CVE-2026-11463 | Deferred | 未確認 | CWE-843 | A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type con |
| CVE-2026-11464 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the function queryPageList of the file src\main\java\org\jeecg\modules\system\controller\ |
| CVE-2026-11465 | Deferred | 未確認 | CWE-840 | A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component R |
| CVE-2026-11466 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in zilliztech deep-searcher up to 0.0.2. This affects the function CollectionRouter.invoke of the file deepsearcher/agent/collection_router.py. This |
| CVE-2026-11467 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. This vulnerability affects the function addAccountHeadAndDetail of the file jshERP-boot/src/main/java/com |
| CVE-2026-11468 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. Perf |
| CVE-2026-11469 | Deferred | 未確認 | CWE-918 | A flaw has been found in jishenghua jshERP up to 3.6. Impacted is the function insertPlatformConfig of the file jshERP-boot/src/main/java/com/jsh/erp/service/PlatformConfigService. |
| CVE-2026-11470 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the file hsweb-system/hsweb-system-file/src/main/java/org/hsweb |
| CVE-2026-11471 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argu |
| CVE-2026-11472 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /index1.php. This manipulation of the argument |
| CVE-2026-11473 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderB |
| CVE-2026-11474 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file service/Regist |
| CVE-2026-11475 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this vulnerability is the function getStatus of the |
| CVE-2026-11476 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this issue is the function edit-admin o |
| CVE-2026-11477 | Deferred | 未確認 | CWE-601 | A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/ |
| CVE-2026-11478 | Deferred | 未確認 | CWE-1333, CWE-400 | A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects the function matchstar of the file re.c of the component Patt |
| CVE-2026-11479 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipu |
| CVE-2026-11480 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the componen |
| CVE-2026-11481 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the com |
| CVE-2026-11482 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /archive5.php. The manipulation of t |
| CVE-2026-11483 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /archive4.php. The manipulation of the arg |
| CVE-2026-11484 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /archive3.php. This manipulation of the argumen |
| CVE-2026-11485 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation of |
| CVE-2026-11486 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1.php. Performi |
| CVE-2026-11487 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/secure.lua of the component View Branch. Executing a manipul |
| CVE-2026-11488 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown part of the file checkUser.php of the component POST Parameter Hand |
| CVE-2026-11489 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminDeleteAlbum.php. The manipulation of t |
| CVE-2026-11490 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argumen |
| CVE-2026-11491 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the file /notice/All_notice of the component Notice Board Manag |
| CVE-2026-11492 | Analyzed | 未確認 | CWE-266, CWE-272 | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. The affected element is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Performing a mani |
| CVE-2026-11493 | Deferred | 未確認 | CWE-521 | A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation |
| CVE-2026-11494 | Deferred | 未確認 | CWE-266, CWE-272 | A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulati |
| CVE-2026-11495 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. This impacts an unknown function of the file /Ingredients-Stock/add_stock.php. The manipulation o |
| CVE-2026-11497 | Analyzed | 未確認 | CWE-266, CWE-272 | A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of the file /etc/conf.d/boa/boa.conf of the component Boa Webs |
| CVE-2026-11498 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the componen |
| CVE-2026-11499 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of |
| CVE-2026-11500 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the com |
| CVE-2026-11501 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f= |
| CVE-2026-11502 | Deferred | 未確認 | CWE-601 | A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function HttpServletResponse.sendRedirect of the file jeecg-module-system/jeecg-system-biz/src/main/java/or |
| CVE-2026-11503 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set of |
| CVE-2026-11504 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda CX12L 16.03.53.12. The impacted element is the function setSchedWifi of the file /goform/openSchedWifi of the component Wi-Fi Schedule Configu |
| CVE-2026-11505 | Deferred | 未確認 | CWE-320, CWE-321 | A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of the component glnassys. Executing a man |
| CVE-2026-11506 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /admin/search_staff_for_deletion.php. The manipulation of the |
| CVE-2026-11507 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /admin/delete_leave_type.php. The manipulation of the argument leave |
| CVE-2026-11508 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search_staff_to_assign_pc.php |
| CVE-2026-11509 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/search_staff_for_updation.php. Such |
| CVE-2026-11510 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/add_leave.php. Performing a manipulation of the argume |
| CVE-2026-11511 | Deferred | 未確認 | CWE-74, CWE-80 | A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Hand |
| CVE-2026-11512 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of |
| CVE-2026-11513 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /adminaccount.php. The manipulation of the argument Date re |
| CVE-2026-11514 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /addpatient.php. This manipulation of the argument adm |
| CVE-2026-11515 | Deferred | 未確認 | CWE-255, CWE-259 | A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The impacted element is an unknown function of the file passswor |
| CVE-2026-11516 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument Na |
| CVE-2026-11517 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in UTT HiPER 2610G up to 3.0.0-171107. This impacts the function strcpy of the file /goform/formConfigDnsFilterGlobal. Executing a manipulation of th |
| CVE-2026-11518 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulatio |
| CVE-2026-11519 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /Product_Inventory/api/users_hand |
| CVE-2026-11520 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross s |
| CVE-2026-11521 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the f |
| CVE-2026-11522 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the |
| CVE-2026-11523 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a |
| CVE-2026-11524 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Int |
| CVE-2026-11525 | Analyzed | 未確認 | CWE-183 | Impact: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact ma |
| CVE-2026-11526 | Deferred | 未確認 | CWE-73, CWE-78 | GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle. GD::Image::_make_filehandle opens a fi |
| CVE-2026-11527 | Deferred | 未確認 | CWE-73, CWE-78 | Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. Config::IniFiles::_m |
| CVE-2026-11528 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub_45304 of the file /goform/getRebootStatus of the component Web Management Interface. T |
| CVE-2026-11529 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the |
| CVE-2026-11530 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. This affects an unknown function of the file /index.ph of the c |
| CVE-2026-11531 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. This impacts an unknown function of the file admin/admin_l |
| CVE-2026-11532 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected is an unknown function of the file /add.php of the com |
| CVE-2026-11533 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected by this vulnerability is an unknown functi |
| CVE-2026-11534 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected by this issue is some unknown functionality of the file |
| CVE-2026-11535 | Deferred | 未確認 | CWE-306 | An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device. |
| CVE-2026-11541 | Modified | 未確認 | CWE-444 | IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 throug |
| CVE-2026-11546 | Analyzed | 未確認 | CWE-918 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled. |
| CVE-2026-11551 | Deferred | 未確認 | CWE-640 | The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly vali |
| CVE-2026-11552 | Deferred | 未確認 | CWE-255, CWE-259 | A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by thi |
| CVE-2026-11553 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument enc |
| CVE-2026-11554 | Deferred | 未確認 | CWE-266, CWE-272 | A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. This vulnerability affects unknown code of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes |
| CVE-2026-11555 | Analyzed | 未確認 | CWE-266, CWE-272 | A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulat |
| CVE-2026-11556 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Tenda F451 1.0.0.7/1.0.0.9. Impacted is the function formWriteFacMac of the file /goform/WriteFacMac of the component Web Management Interfac |
| CVE-2026-11557 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. The affected element is the function fromNatlimit of the file /goform/Natlimit of the component Web Management Interfa |
| CVE-2026-11558 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in CodeAstro Payroll System 1.0. The impacted element is an unknown function of the file /home_salary.php. The manipulation of the argume |
| CVE-2026-11559 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodeAstro Payroll System 1.0. This affects an unknown function of the file /view_account.php. The manipulation of the argument ID results in sql inj |
| CVE-2026-11561 | Deferred | 未確認 | CWE-917 | Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and |
| CVE-2026-11569 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in Quay. The filedrop endpoint accepts any mime type without validation, allowing an authenticated user with repository write access to upload a malicious SVG file |
| CVE-2026-11572 | Deferred | 未確認 | CWE-77, CWE-78 | Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to improper sanitisation of user input for git shell commands direct |
| CVE-2026-11576 | Analyzed | 未確認 | CWE-415, CWE-459, CWE-908 | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path |
| CVE-2026-11577 | Rejected | 未確認 | Rejected reason: The reported behavior does not constitute a privilege escalation. Exploitation requires the attacker to already possess the manage-realm administrative role within | |
| CVE-2026-11581 | Deferred | 未確認 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not sanitise a form field's caption before outputting it as a column header on the adminis | |
| CVE-2026-11582 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodeAstro Student Attendance Management System 1.0. The impacted element is an unknown function of the file /attendance-php/index.php. Executing a manipula |
| CVE-2026-11583 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function of the file /attendance-php/Admin/createClass.php. The manipu |
| CVE-2026-11584 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in CodeAstro Student Attendance Management System 1.0. This impacts an unknown function of the file /attendance-php/Admin/createClass.php?action=edit. The |
| CVE-2026-11585 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of the file /attendance-php/Admin/createClassArms.php. This ma |
| CVE-2026-11589 | Deferred | 未確認 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing mal | |
| CVE-2026-11590 | Deferred | 未確認 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticate | |
| CVE-2026-11594 | Analyzed | 未確認 | CWE-79 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console. |
| CVE-2026-11595 | Analyzed | 未確認 | CWE-22 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system. |
| CVE-2026-11596 | Analyzed | 未確認 | CWE-1284 | In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the abil |
| CVE-2026-11597 | Deferred | 未確認 | CWE-79 | The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'infusionsoft-form' shortcode in versions up to, and including, 2.0.1. |
| CVE-2026-11603 | Deferred | 未確認 | CWE-79 | The Product Filter Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'args[filterFormArray]' Parameter in all versions up to, and includ |
| CVE-2026-11604 | Analyzed | 未確認 | CWE-122, CWE-131, CWE-787 | An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffe |
| CVE-2026-11607 | Deferred | 未確認 | CWE-862 | Backend users with access to the Form Framework were able to use files not ending in .form.yaml as form definitions, which were processed without denying the incorrect file extensi |
| CVE-2026-11611 | Modified | 未確認 | CWE-400 | A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync respon |
| CVE-2026-11614 | Deferred | 未確認 | CWE-79 | The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_attributes' parameter in all versions up to, and incl |
| CVE-2026-11616 | Deferred | 未確認 | CWE-269 | The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 2.3.28. This is due to the ajax_ayi_action() handler |
| CVE-2026-11618 | Deferred | 未確認 | CWE-287 | A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file taier-data-develop/src/main/java/com/dtstack/taier/develop/i |
| CVE-2026-11619 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. The impacted element is an unknown function of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of |
| CVE-2026-11620 | Deferred | 未確認 | CWE-266, CWE-272 | A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results i |
| CVE-2026-11621 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in Dcat-Admin up to 2.2.3-beta. This impacts the function editorMDUpload of the file /admin/dcat-api/editor-md/upload of the component User Setting P |
| CVE-2026-11623 | Deferred | 未確認 | CWE-119, CWE-416 | A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c. Such manipulation leads to use after free. Local access is r |
| CVE-2026-11624 | Awaiting Analysis | 未確認 | CWE-346 | The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25. |
| CVE-2026-11625 | Deferred | 未確認 | CWE-335 | Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface i |
| CVE-2026-11626 | Awaiting Analysis | 未確認 | CWE-250 | CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited pri |
| CVE-2026-11628 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to potentially exploit heap corruption via physical access to the device. (Chromium securi |
| CVE-2026-11629 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi |
| CVE-2026-11630 | Analyzed | 未確認 | CWE-416 | Use after free in File Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security s |
| CVE-2026-11631 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-11632 | Analyzed | 未確認 | CWE-416 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a |
| CVE-2026-11633 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security sever |
| CVE-2026-11634 | Analyzed | 未確認 | CWE-416 | Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-11635 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-11636 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially explo |
| CVE-2026-11637 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Cr |
| CVE-2026-11638 | Analyzed | 未確認 | CWE-416 | Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se |
| CVE-2026-11639 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severi |
| CVE-2026-11640 | Analyzed | 未確認 | CWE-472 | Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-11641 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrar |
| CVE-2026-11642 | Analyzed | 未確認 | CWE-416 | Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-11643 | Analyzed | 未確認 | CWE-416 | Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Cri |
| CVE-2026-11644 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a |
| CVE-2026-11645 | Analyzed | 掲載 | CWE-125, CWE-787 | Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-11646 | Analyzed | 未確認 | CWE-416 | Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-11647 | Analyzed | 未確認 | CWE-416 | Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e |
| CVE-2026-11648 | Analyzed | 未確認 | CWE-416 | Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium |
| CVE-2026-11649 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-11650 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-11651 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-11652 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-11653 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via |
| CVE-2026-11654 | Analyzed | 未確認 | CWE-416 | Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium |
| CVE-2026-11655 | Analyzed | 未確認 | CWE-472 | Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-11656 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox |
| CVE-2026-11657 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: |
| CVE-2026-11658 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site |
| CVE-2026-11659 | Analyzed | 未確認 | CWE-20 | Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi |
| CVE-2026-11660 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentiall |
| CVE-2026-11661 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-11662 | Analyzed | 未確認 | CWE-843 | Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-11663 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-11664 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sev |
| CVE-2026-11665 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-11666 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium sec |
| CVE-2026-11667 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a cra |
| CVE-2026-11668 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. (Chromium secu |
| CVE-2026-11669 | Analyzed | 未確認 | CWE-472 | Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive |
| CVE-2026-11670 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sever |
| CVE-2026-11671 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security |
| CVE-2026-11672 | Analyzed | 未確認 | CWE-787 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-11673 | Analyzed | 未確認 | CWE-416 | Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-11674 | Analyzed | 未確認 | CWE-416 | Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-11675 | Analyzed | 未確認 | CWE-20 | Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML |
| CVE-2026-11676 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process |
| CVE-2026-11677 | Analyzed | 未確認 | CWE-362 | Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via a craf |
| CVE-2026-11678 | Analyzed | 未確認 | CWE-472 | Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information f |
| CVE-2026-11679 | Analyzed | 未確認 | CWE-416 | Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc |
| CVE-2026-11680 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-11681 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium securi |
| CVE-2026-11682 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a |
| CVE-2026-11683 | Analyzed | 未確認 | CWE-416 | Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-11684 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the utility process to leak cross-origin data via |
| CVE-2026-11685 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium |
| CVE-2026-11686 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cros |
| CVE-2026-11687 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security |
| CVE-2026-11688 | Analyzed | 未確認 | CWE-94 | Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-11689 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi |
| CVE-2026-11690 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code i |
| CVE-2026-11691 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross |
| CVE-2026-11692 | Analyzed | 未確認 | CWE-416 | Use after free in Read Anything in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-11693 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a c |
| CVE-2026-11694 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandb |
| CVE-2026-11695 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s |
| CVE-2026-11696 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive in |
| CVE-2026-11697 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
| CVE-2026-11698 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu |
| CVE-2026-11699 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu |
| CVE-2026-11700 | Analyzed | 未確認 | CWE-416 | Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-11701 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sev |
| CVE-2026-11702 | Deferred | 未確認 | CWE-335 | Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for |
| CVE-2026-11703 | Analyzed | 未確認 | CWE-287 | Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed un |
| CVE-2026-11708 | Analyzed | 未確認 | CWE-79 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system. |
| CVE-2026-11712 | Analyzed | 未確認 | CWE-79 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system. |
| CVE-2026-11714 | Modified | 未確認 | CWE-918 | IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled. |
| CVE-2026-11717 | Analyzed | 未確認 | CWE-287 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When verifying an unparsed opaque token |
| CVE-2026-11718 | Analyzed | 未確認 | CWE-287 | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When the toolbox validates an opaque tok |
| CVE-2026-11719 | Analyzed | 未確認 | CWE-862 | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While the 2025-11-25 proto |
| CVE-2026-11720 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlle |
| CVE-2026-11745 | Deferred | 未確認 | CWE-322 | A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// conn |
| CVE-2026-11746 | Deferred | 未確認 | CWE-798 | A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret causes the server to si |
| CVE-2026-11748 | Deferred | 未確認 | CWE-90 | A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an LDA |
| CVE-2026-11752 | Deferred | 未確認 | A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environ | |
| CVE-2026-11764 | Deferred | 未確認 | CWE-280 | When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if the user creating the export does not have permission to vi |
| CVE-2026-11769 | Modified | 未確認 | CWE-22 | We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana O |
| CVE-2026-11772 | Deferred | 未確認 | CWE-79 | DRIMO CMS is vulnerable to Reflected XSS via q parameter in searching functionality. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in |
| CVE-2026-11773 | Deferred | 未確認 | CWE-862 | The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.1. This is due t |
| CVE-2026-11774 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length p |
| CVE-2026-11775 | Deferred | 未確認 | CWE-352 | The User Admin Simplifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce va |
| CVE-2026-11776 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'groupids' parameter in all versions |
| CVE-2026-11777 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'name' parameter in all versions up t |
| CVE-2026-11779 | Deferred | 未確認 | CWE-307 | An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation. |
| CVE-2026-11783 | Deferred | 未確認 | CWE-79 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Product |
| CVE-2026-11784 | Deferred | 未確認 | CWE-352 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, |
| CVE-2026-11785 | Modified | 未確認 | CWE-843 | A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses to |
| CVE-2026-11786 | Modified | 未確認 | CWE-125 | A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causi |
| CVE-2026-11787 | Modified | 未確認 | CWE-126 | A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string f |
| CVE-2026-11788 | Modified | 未確認 | CWE-476 | A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote atta |
| CVE-2026-11789 | Modified | 未確認 | CWE-191 | A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than |
| CVE-2026-11790 | Modified | 未確認 | CWE-400 | A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A |
| CVE-2026-11791 | Modified | 未確認 | CWE-416 | A flaw was found in 389 Directory Server. During schema reload, the attr_syntax_swap_ht() function unconditionally frees attribute syntax information nodes, bypassing the refcount- |
| CVE-2026-11792 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string() function in auditlog.c copies a fixed-length password |
| CVE-2026-11793 | Modified | 未確認 | CWE-121 | A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer without b |
| CVE-2026-11799 | Analyzed | 未確認 | CWE-79 | UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1. |
| CVE-2026-11800 | Analyzed | 未確認 | CWE-347 | A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature ve |
| CVE-2026-11806 | Analyzed | 未確認 | CWE-444 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled. |
| CVE-2026-11807 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when pro |
| CVE-2026-11815 | Awaiting Analysis | 未確認 | CWE-502 | An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability co |
| CVE-2026-11816 | Modified | 未確認 | CWE-22 | Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_t |
| CVE-2026-11819 | Analyzed | 未確認 | CWE-532 | Module: plugins/modules/keyring_info.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native keyring (GNOME Ke |
| CVE-2026-11820 | Analyzed | 未確認 | CWE-532 | A flaw was found in the community.general Ansible collection's nexmo module. The module constructs HTTP requests to the Vonage/Nexmo SMS API by encoding API credentials (api_key an |
| CVE-2026-11822 | Modified | 未確認 | CWE-122 | SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrar |
| CVE-2026-11824 | Modified | 未確認 | CWE-122 | SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by |
| CVE-2026-11825 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-11832 | Deferred | 未確認 | CWE-338 | Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictabl |
| CVE-2026-11833 | Deferred | 未確認 | CWE-319 | Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing the CI Server setting information. This information could be |
| CVE-2026-11834 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability has been identified in the DHCP option processing logic in multiple TP-Link router models, due to insufficient validation of externally supplied D |
| CVE-2026-11837 | Awaiting Analysis | 未確認 | CWE-59 | A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens fi |
| CVE-2026-11839 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server. This issue affects Rota |
| CVE-2026-11844 | Deferred | 未確認 | CWE-22 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside th |
| CVE-2026-11845 | Deferred | 未確認 | CWE-78 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS co |
| CVE-2026-11846 | Deferred | 未確認 | CWE-22 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this v |
| CVE-2026-11847 | Deferred | 未確認 | CWE-22 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerabil |
| CVE-2026-11848 | Deferred | 未確認 | CWE-306 | The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to exploit a specific function |
| CVE-2026-11849 | Deferred | 未確認 | CWE-798 | The iRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credenti |
| CVE-2026-11850 | Awaiting Analysis | 未確認 | CWE-191 | An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtr |
| CVE-2026-11852 | Deferred | 未確認 | CWE-862 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Files managed by debusine are organized into artifacts. The endpoints that create |
| CVE-2026-11853 | Deferred | 未確認 | CWE-59 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages (.dsc) and upload artifacts (.changes) are manifest files t |
| CVE-2026-11857 | Deferred | 未確認 | CWE-502 | Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the Client Update Service due to insecure deserialization in the .NET Remoting service. The ser |
| CVE-2026-11858 | Deferred | 未確認 | CWE-862 | Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the Client Update Service. The update service runs as NT AUTHORITY\SYSTEM and exposes a .NET Re |
| CVE-2026-11859 | Awaiting Analysis | 未確認 | CWE-74 | An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clie |
| CVE-2026-11860 | Deferred | 未確認 | CWE-502, CWE-94 | Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. This allows attackers to tamper with serialized payloads in tra |
| CVE-2026-11877 | Analyzed | 未確認 | CWE-648 | An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3. |
| CVE-2026-11878 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS). This issue affects |
| CVE-2026-11879 | Deferred | 未確認 | CWE-427 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable an |
| CVE-2026-11884 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclass definitions, the oc_superior (SUP) field length is omitted from buffer size calculations |
| CVE-2026-11890 | Analyzed | 未確認 | CWE-284, CWE-882 | Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results. |
| CVE-2026-11906 | Analyzed | 未確認 | CWE-1284 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service du |
| CVE-2026-11911 | Deferred | 未確認 | CWE-22 | The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL_DeleteFile function in all versions up to, |
| CVE-2026-11912 | Deferred | 未確認 | CWE-862 | The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7. This ma |
| CVE-2026-11931 | Awaiting Analysis | 未確認 | CWE-276 | Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or processes via world-re |
| CVE-2026-11933 | Analyzed | 未確認 | CWE-416, CWE-787 | A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. An authenticated user with read privile |
| CVE-2026-11940 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself |
| CVE-2026-11941 | Awaiting Analysis | 未確認 | CWE-416 | Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functions. The “quiche_connection_id_iter_next” and “quiche_conn_retired_sci |
| CVE-2026-11942 | Deferred | 未確認 | CWE-79 | Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the reusable delete confirmation flow. A user with permission to create or modify records, s |
| CVE-2026-11943 | Deferred | 未確認 | CWE-79 | Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can stor |
| CVE-2026-11945 | Analyzed | 未確認 | CWE-89 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and placing malicious code inside a particular key-value |
| CVE-2026-11956 | Deferred | 未確認 | CWE-1004, CWE-614 | A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCookie of the file security/oidc.go of the component OIDC Session Cookie Handler. Executing |
| CVE-2026-11958 | Deferred | 未確認 | CWE-427 | Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, versions 10.2.7 and prior. An attacker with prior access to the system, can place |
| CVE-2026-11967 | Deferred | 未確認 | CWE-427 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable ex |
| CVE-2026-11968 | Deferred | 未確認 | CWE-88 | Argument Injection in TortoiseGitBlame via Malicious Git History Filenames Leads to Arbitrary File Write in TortoiseGit |
| CVE-2026-11972 | Awaiting Analysis | 未確認 | CWE-252, CWE-606, CWE-770 | When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer. |
| CVE-2026-11975 | Deferred | 未確認 | CWE-79 | Stored cross-site scripting (XSS) in NewsItemApiController In SimplCommerce prior to commit 6142d3b5 allows an authenticated administrator to execute arbitrary JavaScript via the S |
| CVE-2026-11979 | Analyzed | 未確認 | CWE-121 | libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user input using fixed-siz |
| CVE-2026-11982 | Deferred | 未確認 | CWE-79 | Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow. |
| CVE-2026-11986 | Analyzed | 未確認 | CWE-425 | A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal e |
| CVE-2026-11987 | Deferred | 未確認 | CWE-639 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all |
| CVE-2026-11989 | Deferred | 未確認 | CWE-918 | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, |
| CVE-2026-11994 | Deferred | 未確認 | CWE-79 | Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store |
| CVE-2026-11997 | Deferred | 未確認 | CWE-352 | The Bulk SEO Image plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.1. This is due to missing or incorrect nonce validation on the |
| CVE-2026-11998 | Awaiting Analysis | 未確認 | CWE-79, CWE-791 | A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the contex |
| CVE-2026-11999 | Analyzed | 未確認 | CWE-295 | X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra |
| CVE-2026-12003 | Awaiting Analysis | 未確認 | CWE-427 | To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), the VPATH variable is defined at build time and used to locate certain landmarks |
| CVE-2026-12007 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: |
| CVE-2026-12008 | Analyzed | 未確認 | CWE-416 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-12009 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to po |
| CVE-2026-12010 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-12011 | Analyzed | 未確認 | CWE-416 | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-12012 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network |
| CVE-2026-12013 | Rejected | 未確認 | Rejected reason: Determined not a vulnerability | |
| CVE-2026-12014 | Analyzed | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traff |
| CVE-2026-12015 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information f |
| CVE-2026-12016 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo |
| CVE-2026-12017 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via |
| CVE-2026-12018 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Ch |
| CVE-2026-12019 | Analyzed | 未確認 | CWE-787 | Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perf |
| CVE-2026-12020 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secur |
| CVE-2026-12022 | Analyzed | 未確認 | CWE-362 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-12023 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-12024 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium secur |
| CVE-2026-12025 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-orig |
| CVE-2026-12026 | Modified | 未確認 | CWE-125 | Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive |
| CVE-2026-12027 | Analyzed | 未確認 | CWE-250, CWE-693 | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo |
| CVE-2026-12028 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-12029 | Analyzed | 未確認 | CWE-416 | Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-12030 | Analyzed | 未確認 | CWE-122 | Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e |
| CVE-2026-12031 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-12032 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isol |
| CVE-2026-12033 | Analyzed | 未確認 | CWE-125 | Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive informatio |
| CVE-2026-12034 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer pro |
| CVE-2026-12035 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu |
| CVE-2026-12038 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-12039 | Awaiting Analysis | 未確認 | CWE-923 | Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host r |
| CVE-2026-12043 | Awaiting Analysis | 未確認 | CWE-415 | Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote threat actor operating a server to cause memory corruption o |
| CVE-2026-12044 | Analyzed | 未確認 | CWE-116, CWE-89 | SQL injection in pgAdmin 4 across every dialog template that renders ``COMMENT ON ... IS '<description>'`` for a user-supplied description field. The Jinja templates for Domains (a |
| CVE-2026-12045 | Analyzed | 未確認 | CWE-77, CWE-89 | Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that the assistant reads to execute arbitrary SQL with the privileg |
| CVE-2026-12046 | Analyzed | 未確認 | CWE-306, CWE-502 | Two state-mutating endpoints in pgAdmin 4's SQL Editor blueprint -- DELETE /sqleditor/close/<trans_id> and POST /sqleditor/initialize/sqleditor/update_connection/<sgid>/<sid>/<did> |
| CVE-2026-12047 | Analyzed | 未確認 | CWE-116, CWE-79 | HTML injection in pgAdmin 4's cloud deployment module. The verify_credentials, deploy, regions, and update-server endpoints under /rds/, /azure/, /google/, and the top-level /cloud |
| CVE-2026-12048 | Analyzed | 未確認 | CWE-116, CWE-79 | Stored cross-site scripting in pgAdmin 4's error-rendering and plan-node-rendering paths. Text returned by a PostgreSQL server (ErrorResponse messages, including object names quote |
| CVE-2026-12049 | Analyzed | 未確認 | CWE-601 | Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register endpoints honoured the user-supplied 'next' query/form parameter without confirming the |
| CVE-2026-12050 | Analyzed | 未確認 | CWE-89 | SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/{gid}/{sid}). The user-supplied 'value' field was interpolated directly into the SQL s |
| CVE-2026-12053 | Analyzed | 未確認 | CWE-532 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive information t |
| CVE-2026-12057 | Analyzed | 未確認 | CWE-829 | When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loade |
| CVE-2026-12058 | Deferred | 未確認 | CWE-807 | The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. |
| CVE-2026-12059 | Deferred | 未確認 | CWE-1284 | The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions |
| CVE-2026-12060 | Deferred | 未確認 | CWE-749 | Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques |
| CVE-2026-12065 | Deferred | 未確認 | CWE-285, CWE-939 | A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of the component WebView URL Handler. The manipulation |
| CVE-2026-12066 | Deferred | 未確認 | CWE-640 | A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the componen |
| CVE-2026-12068 | Deferred | 未確認 | CWE-669 | Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials auto |
| CVE-2026-12073 | Deferred | 未確認 | CWE-639 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.9.9. |
| CVE-2026-12076 | Deferred | 未確認 | CWE-89 | Raytha CMS is vulnerable to SQL Injection within the OData filter parsing pipeline. The vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL statement |
| CVE-2026-12077 | Deferred | 未確認 | CWE-89 | The Dokan Pro plugin for WordPress is vulnerable to time-based SQL Injection via the via 'latitude' and 'longitude' parameters in all versions up to, and including, 5.0.4 due to in |
| CVE-2026-12079 | Deferred | 未確認 | CWE-89 | The Dokan Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ’orderby’ parameter in all versions up to, and including, 5.0.4 due to insufficient escaping on |
| CVE-2026-12084 | Analyzed | 未確認 | CWE-942 | IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and |
| CVE-2026-12085 | Analyzed | 未確認 | CWE-201 | IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could discl |
| CVE-2026-12086 | Modified | 未確認 | CWE-532 | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM |
| CVE-2026-12087 | Deferred | 未確認 | CWE-125, CWE-805 | Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so |
| CVE-2026-12089 | Deferred | 未確認 | CWE-22 | The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 3.3.19. This is due to the com |
| CVE-2026-12093 | Deferred | 未確認 | CWE-862 | The Simple Membership plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.7.5. This is due to the plugin not properly verifying that |
| CVE-2026-12094 | Deferred | 未確認 | CWE-862 | The Advanced Contact Form 7 - Compact DB plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the cf7cdb_ajax_delete_user() func |
| CVE-2026-12095 | Deferred | 未確認 | CWE-918 | The Kargo Takip plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2 via the 'api_url' parameter. This makes it possible for |
| CVE-2026-12098 | Deferred | 未確認 | CWE-79 | The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'embed' Episode Meta Field in all versions up to, and including, 1 |
| CVE-2026-12100 | Deferred | 未確認 | CWE-918 | The URL Preview plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0 via the 'url' parameter. This makes it possible for unau |
| CVE-2026-12102 | Deferred | 未確認 | CWE-639 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Insecure Direct Object Reference in all |
| CVE-2026-12104 | Deferred | 未確認 | CWE-78 | OS command injection in the environment and tunnel configuration functionality in SIMA GmbH Bondix through version 1.25.7.5 on Linux allows an authenticated attacker with configura |
| CVE-2026-12105 | Analyzed | 未確認 | CWE-862 | Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited permissions. |
| CVE-2026-12111 | Deferred | 未確認 | CWE-200 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.4.01. This is due to insufficient authoriz |
| CVE-2026-12112 | Modified | 未確認 | CWE-287 | A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server allows unauthenticated attackers to hijack active administrative sessions due to an |
| CVE-2026-12114 | Deferred | 未確認 | CWE-79 | The Team Members – Multi Language Supported Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8 |
| CVE-2026-12115 | Deferred | 未確認 | CWE-502 | The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via |
| CVE-2026-12117 | Analyzed | 未確認 | CWE-200 | Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login entry metadata to wh |
| CVE-2026-12119 | Deferred | 未確認 | CWE-862 | The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization check on the 'frontmanage' shortcode attribute in all version |
| CVE-2026-12120 | Deferred | 未確認 | CWE-200 | The FireBox Popups – Increase Sales and Grow Your Email List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.7 via th |
| CVE-2026-12129 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/add_tod of the compone |
| CVE-2026-12130 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of the file /Projects/Add_Projects of the component Projects Man |
| CVE-2026-12131 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function Invoice of the file \application\controllers\Payroll.php o |
| CVE-2026-12136 | Deferred | 未確認 | CWE-79 | The Customize My Account For Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sysbasics_user_avatar' shortcode in versions up to, and includin |
| CVE-2026-12137 | Deferred | 未確認 | CWE-79 | The SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' |
| CVE-2026-12143 | Awaiting Analysis | 未確認 | CWE-93 | form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concate |
| CVE-2026-12151 | Modified | 未確認 | CWE-400, CWE-770 | Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malici |
| CVE-2026-12157 | Deferred | 未確認 | CWE-79 | The BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId attribute of the |
| CVE-2026-12161 | Modified | 未確認 | CWE-78 | Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a |
| CVE-2026-12162 | Analyzed | 未確認 | CWE-297 | Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a |
| CVE-2026-12163 | Analyzed | 未確認 | CWE-79 | Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset View UI compo |
| CVE-2026-12164 | Analyzed | 未確認 | CWE-266 | Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool |
| CVE-2026-12165 | Deferred | 未確認 | CWE-269 | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 30.0.2 |
| CVE-2026-12174 | Analyzed | 未確認 | CWE-119, CWE-134 | A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. |
| CVE-2026-12175 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing |
| CVE-2026-12176 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The impacted element is an unknown function of the file /index.php. |
| CVE-2026-12183 | Deferred | 未確認 | CWE-287, CWE-306 | Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration mo |
| CVE-2026-12186 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Servi |
| CVE-2026-12187 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/one_click_upgrade of th |
| CVE-2026-12188 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules/core/backend/app/controllers/concerns/grit/core/g |
| CVE-2026-12189 | Deferred | 未確認 | CWE-285, CWE-939 | A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper |
| CVE-2026-12190 | Deferred | 未確認 | CWE-285, CWE-939 | A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads |
| CVE-2026-12191 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdrive/modeld/modeld.py of the component Pickle Module |
| CVE-2026-12192 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation causes buffer overflow. The attack is only possib |
| CVE-2026-12193 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handler in the library RevoDetector.sys of the component IOCTL Han |
| CVE-2026-12197 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file /cgi-bin/luci/api/diagnose of the component JSON-RPC Diagnos |
| CVE-2026-12198 | Deferred | 未確認 | CWE-22 | A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nosession/thumbnail_img of the component API Endpoint. Executin |
| CVE-2026-12199 | Deferred | 未確認 | CWE-306 | A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when started in its default mode. The |
| CVE-2026-1220 | Analyzed | 未確認 | CWE-362 | Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-12200 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32.dll.html of the component Header |
| CVE-2026-12201 | Deferred | 未確認 | CWE-266, CWE-275 | A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This manipulation causes permi |
| CVE-2026-12202 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functionality of the component Blocks Endpoint. Such manipulation of t |
| CVE-2026-12203 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215. This affects an unknown part of the file /api/research/agents.csv of the component Rese |
| CVE-2026-12204 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in ShopXO up to 6.7.1. This vulnerability affects the function OrderClose/OrderSuccess/PayLogOrderClose/GoodsGiveIntegral of the file app/api/control |
| CVE-2026-12205 | Deferred | 未確認 | CWE-323 | Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key o |
| CVE-2026-12206 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Grit42 Grit up to 0.11.0. This issue affects the function Grit::Assays::DataTableEntity of the file modules/assays/backend/app/models/grit/assays/ |
| CVE-2026-12207 | Deferred | 未確認 | CWE-99 | A security flaw has been discovered in medkey-org medkey up to fc09b7ba9441ff590b72d428d5380834216b09ed. Impacted is the function actionGetPatientById of the file app\modules\medic |
| CVE-2026-12208 | Deferred | 未確認 | CWE-1321, CWE-94 | A weakness has been identified in jsonata-js jsonata up to 2.2.0. The affected element is the function createFrame of the file src/jsonata.js of the component Function Binding Fram |
| CVE-2026-12209 | Deferred | 未確認 | CWE-1321, CWE-94 | A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/index.js of the component Template |
| CVE-2026-12210 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. Performing a manipulat |
| CVE-2026-12211 | Deferred | 未確認 | CWE-22 | A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interfa |
| CVE-2026-12212 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in hcengineering Huly Platform up to 0.7.0. Affected is the function getMailboxSecret of the file server/account/src/operations.ts of the component R |
| CVE-2026-12213 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in hcengineering Huly Platform up to 0.7.0. Affected by this vulnerability is the function getAccountInfo of the file server/account/src/operations.ts of |
| CVE-2026-12214 | Deferred | 未確認 | CWE-693 | A security flaw has been discovered in Qihoo 360 Total Security 6.0. This vulnerability affects the function RpcStringBindingComposeW of the component Nucleus Engine Monitoring Log |
| CVE-2026-12216 | Deferred | 未確認 | CWE-119 | A weakness has been identified in svaarala duktape up to 2.99.99. This issue affects some unknown processing of the file duk_api_bytecode.c. Executing a manipulation of the argumen |
| CVE-2026-12217 | Deferred | 未確認 | CWE-266, CWE-269 | A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The m |
| CVE-2026-12218 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest of the component Web |
| CVE-2026-12219 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagnosis/start of the component Web F |
| CVE-2026-12220 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgrade.SparePartsUpload of the file /api/upgrade/accupgradebychunk of the component |
| CVE-2026-12221 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk Upload Handler. Perfo |
| CVE-2026-12222 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the function mod_webd.BlueToothTest of the file /api/inner/bttest of the component Web FastCGI Service. |
| CVE-2026-12223 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the file /api/inner/tftpuploadiperf of t |
| CVE-2026-12225 | Deferred | 未確認 | CWE-288 | syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an authentication bypass vulnerability. An attacker with valid credentials for a user a |
| CVE-2026-12238 | Deferred | 未確認 | CWE-862 | The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.1.01. This is due to the plugin not pro |
| CVE-2026-12240 | Deferred | 未確認 | CWE-502 | The Export User Data plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the unserialize function in all versions up to, and i |
| CVE-2026-12242 | Deferred | 未確認 | CWE-94 | The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 5.17.7 via the 'banner' attribute of the adrotate shortco |
| CVE-2026-12243 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-12244 | Analyzed | 未確認 | CWE-122, CWE-190 | If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted SVCB RR with an rdata size of 6551 |
| CVE-2026-12245 | Analyzed | 未確認 | CWE-416 | NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS |
| CVE-2026-12246 | Analyzed | 未確認 | CWE-120, CWE-20 | NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is writt |
| CVE-2026-12249 | Awaiting Analysis | 未確認 | CWE-348 | An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Services (AD CS) certificate auto-enrollment via the vendored Samb |
| CVE-2026-12256 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3. |
| CVE-2026-12289 | Modified | 未確認 | CWE-266, CWE-269 | Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140 |
| CVE-2026-12290 | Modified | 未確認 | CWE-119, CWE-823 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12291 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12292 | Modified | 未確認 | CWE-119, CWE-787 | Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12293 | Modified | 未確認 | CWE-416, CWE-825 | Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12294 | Modified | 未確認 | CWE-266, CWE-693 | Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12295 | Modified | 未確認 | CWE-653, CWE-693 | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12296 | Modified | 未確認 | CWE-403, CWE-693 | Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12297 | Modified | 未確認 | CWE-119, CWE-653 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 15 |
| CVE-2026-12298 | Modified | 未確認 | CWE-125, CWE-416, CWE-787, CWE-843 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12299 | Modified | 未確認 | CWE-733, CWE-843 | JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12300 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12301 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12302 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12303 | Analyzed | 未確認 | CWE-125 | Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12304 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12305 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12306 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12307 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12308 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12309 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12310 | Modified | 未確認 | CWE-119, CWE-125, CWE-416, CWE-787 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12311 | Analyzed | 未確認 | CWE-200, CWE-688 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderb |
| CVE-2026-12312 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12313 | Analyzed | 未確認 | CWE-269 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderb |
| CVE-2026-12314 | Modified | 未確認 | CWE-119, CWE-125, CWE-416, CWE-787 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12315 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12316 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12317 | Modified | 未確認 | CWE-119 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12318 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12319 | Analyzed | 未確認 | CWE-400 | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12320 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12321 | Analyzed | 未確認 | CWE-670 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12322 | Analyzed | 未確認 | CWE-1021 | Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12323 | Analyzed | 未確認 | CWE-1021 | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. |
| CVE-2026-12324 | Analyzed | 未確認 | CWE-703 | Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12325 | Analyzed | 未確認 | CWE-400 | Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. |
| CVE-2026-12326 | Modified | 未確認 | CWE-119, CWE-825 | Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha |
| CVE-2026-12327 | Analyzed | 未確認 | CWE-119 | Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume th |
| CVE-2026-12328 | Modified | 未確認 | CWE-120, CWE-825 | Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corrupti |
| CVE-2026-12329 | Modified | 未確認 | CWE-119, CWE-416, CWE-476 | Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12. |
| CVE-2026-12330 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12. |
| CVE-2026-12340 | Analyzed | 未確認 | CWE-125 | Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the tr |
| CVE-2026-12348 | Deferred | 未確認 | CWE-1021 | Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishin |
| CVE-2026-12349 | Deferred | 未確認 | CWE-862 | The Premium Addons for KingComposer plugin for WordPress is vulnerable to unauthorized modification and loss of data in versions up to, and including, 1.1.1. This is due to missing |
| CVE-2026-12360 | Deferred | 未確認 | CWE-89 | The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1. The listing_load_more AJAX handler accepts a filtered_query paramete |
| CVE-2026-12388 | Analyzed | 未確認 | CWE-266 | A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An ad |
| CVE-2026-12390 | Analyzed | 未確認 | CWE-843 | In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution |
| CVE-2026-12398 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the legacy role import API (v1) interpolates unsanitized git ref names (branch/tag names |
| CVE-2026-12399 | Deferred | 未確認 | CWE-79 | The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includ |
| CVE-2026-12404 | Deferred | 未確認 | CWE-862 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.2.2. This is due to the plugi |
| CVE-2026-12407 | Deferred | 未確認 | CWE-862 | The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.32.26. This is due to the screen_action() |
| CVE-2026-12411 | Analyzed | 未確認 | CWE-639, CWE-862 | Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via |
| CVE-2026-12412 | Rejected | 未確認 | Rejected reason: loading template... | |
| CVE-2026-12415 | Deferred | 未確認 | CWE-269 | The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions up t |
| CVE-2026-12416 | Deferred | 未確認 | CWE-640 | The Invoice Generator plugin for WordPress is vulnerable to Account Takeover via Password Reset in all versions up to, and including, 1.0.0. This is due to the `pravel_invoice_chan |
| CVE-2026-12417 | Deferred | 未確認 | CWE-640 | The SignUp & SignIn plugin for WordPress is vulnerable to Authentication Bypass via Weak Password Reset Validation leading to Account Takeover in versions up to, and including, 1.0 |
| CVE-2026-12425 | Modified | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). T |
| CVE-2026-12430 | Deferred | 未確認 | CWE-79 | The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.45 due to insufficient input sa |
| CVE-2026-12432 | Deferred | 未確認 | CWE-862 | The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfs_update_failed_payment_status AJAX action. T |
| CVE-2026-12437 | Analyzed | 未確認 | CWE-416 | Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e |
| CVE-2026-12438 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-12439 | Analyzed | 未確認 | CWE-416 | Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium s |
| CVE-2026-12440 | Analyzed | 未確認 | CWE-416 | Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
| CVE-2026-12441 | Analyzed | 未確認 | CWE-416 | Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium s |
| CVE-2026-12442 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security seve |
| CVE-2026-12443 | Analyzed | 未確認 | CWE-416 | Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severi |
| CVE-2026-12444 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to obtain potentially sensitive information from process memory via a |
| CVE-2026-12445 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corrupti |
| CVE-2026-12446 | Analyzed | 未確認 | CWE-863 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s |
| CVE-2026-12447 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-12448 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chro |
| CVE-2026-12449 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium s |
| CVE-2026-12450 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a craft |
| CVE-2026-12451 | Analyzed | 未確認 | CWE-416 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-12452 | Analyzed | 未確認 | CWE-416 | Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium |
| CVE-2026-12453 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass same origi |
| CVE-2026-12454 | Analyzed | 未確認 | CWE-362 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-12455 | Analyzed | 未確認 | CWE-416 | Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap co |
| CVE-2026-12456 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to bypass same origin |
| CVE-2026-12457 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via |
| CVE-2026-12458 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-or |
| CVE-2026-12459 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chrom |
| CVE-2026-12460 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site iso |
| CVE-2026-12461 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra |
| CVE-2026-12462 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a |
| CVE-2026-12463 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to inject arbitrary scrip |
| CVE-2026-12464 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-12465 | Analyzed | 未確認 | CWE-20 | Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-12466 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s |
| CVE-2026-12467 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-12468 | Analyzed | 未確認 | CWE-362 | Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-12469 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit |
| CVE-2026-12471 | Deferred | 未確認 | CWE-862 | The Spexo theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the activate_plugin function in all versions up to, and including, 2.0.11. T |
| CVE-2026-12473 | Deferred | 未確認 | CWE-918 | Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF aut |
| CVE-2026-12475 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-12479 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and loading library. This vu |
| CVE-2026-12485 | Deferred | 未確認 | CWE-121 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox l |
| CVE-2026-12486 | Deferred | 未確認 | CWE-78 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command exe |
| CVE-2026-12488 | Deferred | 未確認 | CWE-121 | A memory corruption vulnerability exists in the GV-Cloud functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted network request can lead to a denial of service. An at |
| CVE-2026-12490 | Analyzed | 未確認 | CWE-284, CWE-306 | When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed whe |
| CVE-2026-12491 | Awaiting Analysis | 未確認 | CWE-115 | A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientati |
| CVE-2026-12505 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled envir |
| CVE-2026-12515 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUploadsController allowed users with the ed |
| CVE-2026-12527 | Deferred | 未確認 | CWE-306 | A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unaut |
| CVE-2026-12528 | Analyzed | 未確認 | CWE-787 | A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of aclparse.c. A malformed ACI (Access Control Instruction) string can trigger heap-buffer-overf |
| CVE-2026-12529 | Deferred | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Affected is an unknown function of the file /index.php o |
| CVE-2026-12530 | Awaiting Analysis | 未確認 | CWE-88 | Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK versions >= 1.1.3 and < 1.6.1 might allow a remote authenticated |
| CVE-2026-12537 | Analyzed | 未確認 | CWE-20, CWE-78 | Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) |
| CVE-2026-12539 | Awaiting Analysis | 未確認 | CWE-665, CWE-923 | Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon re |
| CVE-2026-12549 | Analyzed | 未確認 | CWE-805 | The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request w |
| CVE-2026-12560 | Deferred | 未確認 | CWE-79 | The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4 |
| CVE-2026-12565 | Deferred | 未確認 | CWE-22 | The unarchive internal module's archive extraction commands perform no code-level validation on extracted file paths, relying entirely on the behavior of external tools (e.g. GNU t |
| CVE-2026-12566 | Deferred | 未確認 | CWE-918 | The docker_pull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in |
| CVE-2026-12567 | Deferred | 未確認 | CWE-59 | The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can |
| CVE-2026-12568 | Deferred | 未確認 | CWE-22 | The postman_download module uses the workspace name field from the Postman API to construct the local directory path without sanitization. If a malicious workspace has a name conta |
| CVE-2026-12569 | Analyzed | 掲載 | CWE-20, CWE-502 | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of u |
| CVE-2026-12578 | Deferred | 未確認 | CWE-502 | The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code. |
| CVE-2026-12580 | Deferred | 未確認 | CWE-79 | EasyFlow .NET developed by Digiwin has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript code executed in users' |
| CVE-2026-12581 | Deferred | 未確認 | CWE-384 | EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's priv |
| CVE-2026-12602 | Deferred | 未確認 | CWE-276 | Incorrect default permissions in ArubaSign, affecting versions prior to v4.6.6. The vulnerability is caused by the assignment of inappropriate permissions during the software’s def |
| CVE-2026-12610 | Undergoing Analysis | 未確認 | CWE-825 | A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. |
| CVE-2026-12616 | Deferred | 未確認 | CWE-117 | The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that string into three log statements bef |
| CVE-2026-12619 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue |
| CVE-2026-12620 | Analyzed | 未確認 | CWE-200 | The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. |
| CVE-2026-12621 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0. |
| CVE-2026-12622 | Analyzed | 未確認 | CWE-601 | The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. |
| CVE-2026-12628 | Undergoing Analysis | 未確認 | CWE-798 | IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker to bypass authentication due t |
| CVE-2026-12635 | Analyzed | 未確認 | CWE-350 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have a |
| CVE-2026-12644 | Deferred | 未確認 | CWE-248 | Versions of the package ts-deepmerge before 8.0.0 are vulnerable to Uncaught Exception due to the improper handling of built-in Object.prototype methods (such as toString, valueOf) |
| CVE-2026-12672 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-12673 | Deferred | 未確認 | CWE-285 | Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modi |
| CVE-2026-12681 | Awaiting Analysis | 未確認 | CWE-1285 | Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation. parseEfiSignatureList() does not advance the buffer past vendor bytes b |
| CVE-2026-12706 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent realloca |
| CVE-2026-12725 | Analyzed | 未確認 | CWE-122 | A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or di |
| CVE-2026-12726 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request webhooks, the controller stores the pull_request.statuses_url value from the webhook pay |
| CVE-2026-12755 | Analyzed | 未確認 | CWE-1284 | Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the UserGroupsView permission to |
| CVE-2026-12760 | Analyzed | 未確認 | CWE-770 | A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented packets. An unauthenti |
| CVE-2026-12770 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints. |
| CVE-2026-12771 | Analyzed | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/user_api_key_auth.py of the component M2M JWT Handle |
| CVE-2026-12772 | Analyzed | 未確認 | CWE-613 | A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the file litellm/proxy/auth/login_utils.py of the component PROX |
| CVE-2026-12773 | Modified | 未確認 | CWE-287, CWE-303 | A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mc |
| CVE-2026-12774 | Analyzed | 未確認 | CWE-918 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function _execute_with_mcp_client of the file litellm/proxy/_exper |
| CVE-2026-12775 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /l |
| CVE-2026-12776 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This mani |
| CVE-2026-12778 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such ma |
| CVE-2026-12779 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performi |
| CVE-2026-12780 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation |
| CVE-2026-12781 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The ma |
| CVE-2026-12782 | Deferred | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver. T |
| CVE-2026-12784 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA_NTDRV.sys of the component Kernel Driver. This manipul |
| CVE-2026-12786 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component |
| CVE-2026-12787 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The mani |
| CVE-2026-12788 | Deferred | 未確認 | CWE-610, CWE-611 | A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerability affects unknown code of the file /adpweb/a/base/barcode |
| CVE-2026-12789 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/cla |
| CVE-2026-12795 | Analyzed | 未確認 | CWE-287, CWE-306 | A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO D |
| CVE-2026-12796 | Analyzed | 未確認 | CWE-613 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py |
| CVE-2026-12797 | Analyzed | 未確認 | CWE-285, CWE-863 | A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the file enterprise/enterprise_hooks/banned_keywords.py of the |
| CVE-2026-12798 | Analyzed | 未確認 | CWE-918 | A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_openapi_spec_async of the file litellm/proxy/_experimental/mcp_s |
| CVE-2026-12799 | Analyzed | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_view_users of the file litellm/proxy/management_endpoints/inte |
| CVE-2026-12804 | Deferred | 未確認 | CWE-601 | A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML C |
| CVE-2026-12805 | Deferred | 未確認 | CWE-119, CWE-122 | A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in the library ofstd/libsrc/ofxml.cc. Executing a manipulation can lead to |
| CVE-2026-12806 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request |
| CVE-2026-12807 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the file /goform/setWAN of the component POST Request Handler. The manipulation of the ar |
| CVE-2026-12808 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Edimax BR-6478AC V2 1.23. This impacts the function stainfo of the file /goform/stainfo of the component POST Request Handler. This manipulation o |
| CVE-2026-12809 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Edimax BR-6478AC V2 1.23. Affected is the function wiz_5in1_redirect of the file /goform/wiz_5in1_redirect of the component POST Request Handler. |
| CVE-2026-12810 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Edimax BR-6478AC V2 1.23. Affected by this vulnerability is the function mp of the file /goform/mp of the component POST Request Handler. Per |
| CVE-2026-12811 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in kortix-ai suna up to 0.8.38. Affected by this issue is the function router.replace/router.push of the file apps/frontend/src/app/auth/page.tsx of |
| CVE-2026-12812 | Deferred | 未確認 | CWE-74, CWE-80 | A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads t |
| CVE-2026-12813 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/ |
| CVE-2026-12814 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Comfast CF-WR631AX V3 up to 2.7.0.8. This issue affects the function system of the file /cgi-bin/mbox-config?section=ping_config of the component API Endpo |
| CVE-2026-12815 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in coollabsio coolify 4.0.0. Impacted is an unknown function of the component Image Name Handler. Such manipulation leads to os command injection. Th |
| CVE-2026-12818 | Deferred | 未確認 | CWE-770 | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service. |
| CVE-2026-12819 | Deferred | 未確認 | CWE-306 | Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sens |
| CVE-2026-12821 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in FlowiseAI Flowise up to 3.1.2. The impacted element is an unknown function of the file packages/components/nodes/documentloaders/S3/S3.ts of the c |
| CVE-2026-12822 | Analyzed | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. T |
| CVE-2026-12823 | Deferred | 未確認 | CWE-266, CWE-276 | A security flaw has been discovered in Browserbase Skills up to 20260526. This impacts an unknown function of the component Autobrowse Trace Artifact Handler. The manipulation resu |
| CVE-2026-12844 | Deferred | 未確認 | CWE-122, CWE-787 | List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function. pairwise() collects the values returned by the block into a heap buffer siz |
| CVE-2026-12845 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-12846 | Deferred | 未確認 | CWE-121 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox l |
| CVE-2026-12847 | Deferred | 未確認 | CWE-121 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox l |
| CVE-2026-12848 | Deferred | 未確認 | CWE-121 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox l |
| CVE-2026-12849 | Deferred | 未確認 | CWE-78 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command exe |
| CVE-2026-12850 | Deferred | 未確認 | CWE-78 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command exe |
| CVE-2026-12851 | Deferred | 未確認 | CWE-78 | Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command exe |
| CVE-2026-12856 | Modified | 未確認 | CWE-88 | A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, |
| CVE-2026-12862 | Deferred | 未確認 | CWE-148 | Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of the user loading the |
| CVE-2026-12863 | Deferred | 未確認 | CWE-601 | An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains. |
| CVE-2026-12866 | Deferred | 未確認 | CWE-94 | All versions of the package expr-eval are vulnerable to Code Execution via the toJSFunction() API. An attacker can execute arbitrary JavaScript by supplying crafted expressions tha |
| CVE-2026-1288 | Analyzed | 未確認 | CWE-476 | A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation |
| CVE-2026-12888 | Awaiting Analysis | 未確認 | CWE-74 | An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An at |
| CVE-2026-12891 | Analyzed | 未確認 | CWE-125 | A flaw was found in the GStreamer gst-plugins-bad package. When processing a malformed H.266/VVC video stream with a crafted aspect ratio indicator value, the H.266 parser performs |
| CVE-2026-12892 | Analyzed | 未確認 | CWE-125 | A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing malformed MVC or SVC extension slice NAL units, a 1-byte he |
| CVE-2026-12897 | Deferred | 未確認 | CWE-125 | Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability c |
| CVE-2026-1291 | Deferred | 未確認 | CWE-639 | The Meow Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST API endpoint /wp-json/meow-gallery/v1/save_sh |
| CVE-2026-12912 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pix |
| CVE-2026-12921 | Analyzed | 未確認 | CWE-416 | In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution |
| CVE-2026-12937 | Deferred | 未確認 | CWE-89 | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'post_id' parameter in all |
| CVE-2026-12957 | Awaiting Analysis | 未確認 | CWE-732 | Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution. If a local user opens a m |
| CVE-2026-12958 | Awaiting Analysis | 未確認 | CWE-61 | Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace |
| CVE-2026-12969 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records, extract_name() is called with extrabytes=0, failing t |
| CVE-2026-12975 | Modified | 未確認 | CWE-611 | A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or disabling external entit |
| CVE-2026-12986 | Deferred | 未確認 | CWE-352, CWE-918 | A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All platforms that allows the attacker to leak the admin gfresttoken |
| CVE-2026-12992 | Modified | 未確認 | CWE-918 | A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to |
| CVE-2026-12993 | Modified | 未確認 | CWE-776 | A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURE_SECUR |
| CVE-2026-13006 | Deferred | 未確認 | CWE-20 | ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitr |
| CVE-2026-13007 | Analyzed | 未確認 | CWE-306, CWE-524 | Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, |
| CVE-2026-13008 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-57700. Reason: This candidate is a reservation duplicate of CVE-2026-57700. Notes: All CVE user | |
| CVE-2026-13021 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to bypass same origin policy via a crafted HTML pag |
| CVE-2026-13022 | Modified | 未確認 | CWE-346 | Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a |
| CVE-2026-13023 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fro |
| CVE-2026-13024 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site |
| CVE-2026-13025 | Analyzed | 未確認 | CWE-20 | Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted H |
| CVE-2026-13026 | Analyzed | 未確認 | CWE-416 | Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr |
| CVE-2026-13027 | Analyzed | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security s |
| CVE-2026-13028 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-13029 | Analyzed | 未確認 | CWE-416 | Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap |
| CVE-2026-13030 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-13031 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-13032 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-13033 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium |
| CVE-2026-13034 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a |
| CVE-2026-13035 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security sever |
| CVE-2026-13036 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-13037 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-13038 | Analyzed | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security sever |
| CVE-2026-13083 | Analyzed | 未確認 | CWE-79 | A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker with cluster administrat |
| CVE-2026-13140 | Awaiting Analysis | 未確認 | CWE-79 | Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. Thi |
| CVE-2026-13149 | Deferred | 未確認 | CWE-400, CWE-407 | brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace g |
| CVE-2026-13150 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) (CWE-918) in the PDF generation endpoint GET /api/reports/{id}/pdf (backend/main.py) in ccyl13 Pentestify 1.0.0 and lower allows remote attackers |
| CVE-2026-13163 | Deferred | 未確認 | CWE-601 | Open redirect vulnerability (CWE-601) in the _safe_redirect function of the click-tracking endpoint (/c/<token>/) in Mailerup <1.0.0 on all platforms allows remote unauthenticated |
| CVE-2026-13164 | Deferred | 未確認 | CWE-306 | Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauth |
| CVE-2026-13165 | Deferred | 未確認 | CWE-434 | SzafirHost verifies the downloaded native library archive with one JarFile parser (reading the Central Directory) but extracts native libraries with JarInputStream parser (reading |
| CVE-2026-13201 | Modified | 未確認 | CWE-61 | A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream |
| CVE-2026-13207 | Deferred | 未確認 | CWE-290 | FUXA versions 1.3.1 and prior contain an authentication bypass vulnerability via dot-segment path normalization in the REST API. The API router fails to normalize dot-segment seque |
| CVE-2026-13208 | Analyzed | 未確認 | CWE-287 | A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomainEvent and HandleK8SEvent derive the VMI identity (namespace/name) solely from th |
| CVE-2026-13218 | Analyzed | 未確認 | CWE-61 | A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without sym |
| CVE-2026-13222 | Deferred | 未確認 | CWE-841 | Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one p |
| CVE-2026-13223 | Deferred | 未確認 | CWE-841 | Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from on |
| CVE-2026-13225 | Deferred | 未確認 | CWE-80 | Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page for individual tickets in that orde |
| CVE-2026-13226 | Deferred | 未確認 | CWE-89 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'after' parameter in all versions up to, and includi |
| CVE-2026-13245 | Deferred | 未確認 | CWE-79 | The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'view' parameter in all versions up to, and including, 9.8.5 due to ins |
| CVE-2026-13281 | Analyzed | 未確認 | CWE-472 | Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a m |
| CVE-2026-13282 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical access to the device. (C |
| CVE-2026-13283 | Analyzed | 未確認 | CWE-416 | Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary |
| CVE-2026-13295 | Deferred | 未確認 | CWE-79 | The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panels_data Parameter in all versions up to, and including, 2.34.3 due to insuf |
| CVE-2026-13311 | Analyzed | 未確認 | CWE-407 | shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every i |
| CVE-2026-13314 | Deferred | 未確認 | CWE-80 | Malicious HTML content could be injected into the content rendered by the pretix-digital plugin. |
| CVE-2026-13316 | Analyzed | 未確認 | CWE-918 | A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files. Attackers can perform an SSRF attack and steal cloud metadata se |
| CVE-2026-13318 | Analyzed | 未確認 | CWE-918 | A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api |
| CVE-2026-13322 | Analyzed | 未確認 | CWE-770 | A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Reader.ReadLine(), which buffers input indefinitely until a ne |
| CVE-2026-13325 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. | |
| CVE-2026-13331 | Deferred | 未確認 | CWE-89 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'search' parameter in all versions up to, and includ |
| CVE-2026-13333 | Deferred | 未確認 | CWE-89 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via 'query[select]' Parameter in all versions up to, and inc |
| CVE-2026-13335 | Deferred | 未確認 | CWE-79 | The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpm_point' Post Meta in all versions up to, and including, 1.2.6 due |
| CVE-2026-13350 | Deferred | 未確認 | CWE-639 | Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create. |
| CVE-2026-13351 | Analyzed | 未確認 | CWE-772 | Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming packets by sending a small number of maliciously fragmented IPv6 packets. When such a pack |
| CVE-2026-13372 | Analyzed | 未確認 | CWE-706 | Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with |
| CVE-2026-13422 | Deferred | 未確認 | CWE-352 | The HD Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 2.2.0 to 2.2.1. This is due to missing or incorrect nonce validation on the hdq_validate_no |
| CVE-2026-13426 | Awaiting Analysis | 未確認 | CWE-22 | The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to validate path parameters when constructing API route paths which allows an attack |
| CVE-2026-13434 | Analyzed | 未確認 | CWE-20 | A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is w |
| CVE-2026-13437 | Analyzed | 未確認 | CWE-201 | Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obt |
| CVE-2026-13449 | Analyzed | 未確認 | CWE-611 | IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could e |
| CVE-2026-13455 | Analyzed | 未確認 | CWE-328 | PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform a |
| CVE-2026-13474 | Analyzed | 未確認 | CWE-401 | Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, |
| CVE-2026-13482 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function username.encode of the file sky/users/server.py of the component User ID Handler. The m |
| CVE-2026-13483 | Deferred | 未確認 | CWE-345 | A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the file application/security/encryption.py of the component Creden |
| CVE-2026-13484 | Analyzed | 未確認 | CWE-862, CWE-863 | A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component Experiment-scoped Label Schema |
| CVE-2026-13485 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a manipulation of the argum |
| CVE-2026-13486 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation o |
| CVE-2026-13487 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive.php. The manipulation of the argument s |
| CVE-2026-13488 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown functionality of the file /preview7. |
| CVE-2026-13489 | Deferred | 未確認 | CWE-662 | A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of the file main/mcp_server.cc of the component MCP Response Han |
| CVE-2026-13490 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file front/document.send.php of the com |
| CVE-2026-13491 | Deferred | 未確認 | CWE-404 | A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file main/protocols/mqtt_protocol.cc of the co |
| CVE-2026-13493 | Deferred | 未確認 | CWE-99 | A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file backend/controller/conversation_api.py of the component Workfl |
| CVE-2026-13495 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /adminprofile.php. The manipulation of the argument login |
| CVE-2026-13496 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedicine.php. The manipulation of the argumen |
| CVE-2026-13497 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appointment.php. This manipulation of the ar |
| CVE-2026-13498 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of the component POST Parameter Ha |
| CVE-2026-13499 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_register.php of the component Registration |
| CVE-2026-13500 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Gramma |
| CVE-2026-13501 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2. Affected by this vulnerability is the function GoTarget of the file tool/src/org/antlr/v4/codegen/target/Go |
| CVE-2026-13502 | Deferred | 未確認 | CWE-362, CWE-367 | A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/Gramm |
| CVE-2026-13503 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java |
| CVE-2026-13504 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Suc |
| CVE-2026-13507 | Deferred | 未確認 | CWE-345 | A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file openviking/storage/vectordb/utils/str_to_uint64.py of the co |
| CVE-2026-13508 | Deferred | 未確認 | CWE-285, CWE-863 | A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing Handler. |
| CVE-2026-13509 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controllers/files.py o |
| CVE-2026-13510 | Deferred | 未確認 | CWE-327, CWE-328 | A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the |
| CVE-2026-13511 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.ha |
| CVE-2026-13512 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/sessio |
| CVE-2026-13513 | Deferred | 未確認 | CWE-345 | A security flaw has been discovered in MyScale MyScaleDB up to 1.8.0. This vulnerability affects the function SegmentId::getCacheKey in the library src/VectorIndex/Common/SegmentId |
| CVE-2026-13514 | Deferred | 未確認 | CWE-285, CWE-530 | A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com. |
| CVE-2026-13515 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the arg |
| CVE-2026-13516 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of t |
| CVE-2026-13517 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulation of the argument s |
| CVE-2026-13518 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to s |
| CVE-2026-13519 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page res |
| CVE-2026-13520 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the component Appointment Han |
| CVE-2026-13521 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functionality of the file /preview5.php. |
| CVE-2026-13522 | Deferred | 未確認 | CWE-119, CWE-125 | A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14. Affected by this issue is the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 of the fil |
| CVE-2026-13523 | Deferred | 未確認 | CWE-404, CWE-409 | A weakness has been identified in GPAC up to 26.02.0. This affects an unknown part of the file src/utils/base_encoding.c of the component ISOBMFF Parser. Executing a manipulation c |
| CVE-2026-13524 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of the |
| CVE-2026-13525 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/Employee_model.php of |
| CVE-2026-13526 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_class.php. This manipulation of the argument ID cau |
| CVE-2026-13527 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /preview4.php. Such manipulation of |
| CVE-2026-13528 | Deferred | 未確認 | CWE-22 | A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the function generateUploadPath of the file yudao-module-infra/ |
| CVE-2026-13529 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipulation of the argument siteurl ca |
| CVE-2026-13530 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /appointmentdetail.php of the component Appointment Hand |
| CVE-2026-13531 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The manipulation of the argument ed |
| CVE-2026-13532 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /departmentDoctor.php. This ma |
| CVE-2026-13533 | Deferred | 未確認 | CWE-425, CWE-552 | A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this issue is the function Spyc::YAMLLoad of the file /config/config.yaml of the compon |
| CVE-2026-13534 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in CherryHQ cherry-studio up to 1.9.7. This affects the function sha256 of the file src/main/services/memory/MemoryService.ts of the component CherryIN |
| CVE-2026-13535 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employee_model. |
| CVE-2026-13536 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in GotoHTTP up to 10.2. This issue affects some unknown processing of the file /reg.12x. The manipulation of the argument sn leads to cross site scri |
| CVE-2026-13537 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function. The manipulation results in cross-site request forgery. The attack may |
| CVE-2026-13538 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Wavlink WL-NU516U1-A M16U1_V240425. The affected element is the function sub_401D68 of the file /cgi-bin/wireless.cgi of the component POST Parame |
| CVE-2026-13539 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the function sub_407504 of the file /cgi-bin/wireless.cgi of the component POST Parame |
| CVE-2026-13540 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in GitBucket up to 4.46.1. This affects the function Git.cloneRepository.setURI of the file src/main/scala/gitbucket/core/service/RepositoryCrea |
| CVE-2026-13541 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /doctorchangepassword.php. Executing a manipulation of t |
| CVE-2026-13542 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the a |
| CVE-2026-13543 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in Documenso up to 2.11.0. Affected by this vulnerability is an unknown functionality of the file packages/auth/server/lib/utils/handle-oauth-callback- |
| CVE-2026-13544 | Deferred | 未確認 | CWE-266, CWE-284 | A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality of the file /api/users of the component API. This manipulation causes improper |
| CVE-2026-13545 | Analyzed | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation o |
| CVE-2026-13546 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API Endpoint. Performing a manipulation |
| CVE-2026-13547 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Execu |
| CVE-2026-13548 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation of the argument edit |
| CVE-2026-13549 | Deferred | 未確認 | CWE-285, CWE-639 | A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php o |
| CVE-2026-13550 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /delbaptism.php. This manipulation |
| CVE-2026-13551 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /editBaptism.php. Such manipulati |
| CVE-2026-13552 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_amenities/controller.php?action=edit. Perfo |
| CVE-2026-13553 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /admin/mod_amenities/controller.php?action=add. Executing a ma |
| CVE-2026-13554 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/mod_amenities/contr |
| CVE-2026-13555 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/mod_users/controller.php?actio |
| CVE-2026-13556 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/mod_users/controller.php?action=edit of the compo |
| CVE-2026-13557 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/mod_room/controller.php?action=add of |
| CVE-2026-13558 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /report/addreport of the component Report H |
| CVE-2026-13559 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executing a manipulation of t |
| CVE-2026-13560 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request H |
| CVE-2026-13561 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. |
| CVE-2026-13562 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. This man |
| CVE-2026-13563 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such mani |
| CVE-2026-13564 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. Performing a |
| CVE-2026-13565 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /edit_class1.ph |
| CVE-2026-13566 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /preview3.php. The manipula |
| CVE-2026-13567 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. T |
| CVE-2026-13568 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_handler.php of the component User R |
| CVE-2026-13569 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipula |
| CVE-2026-13570 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users_handler.php of the component User Registratio |
| CVE-2026-13571 | Deferred | 未確認 | CWE-840 | A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipulation of the argument |
| CVE-2026-13572 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of |
| CVE-2026-13573 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSym |
| CVE-2026-13574 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component |
| CVE-2026-13578 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patientdetail.php. Perfo |
| CVE-2026-13579 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientchangepassword.php. Executin |
| CVE-2026-13580 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manip |
| CVE-2026-13581 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Ha |
| CVE-2026-13582 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manip |
| CVE-2026-13583 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. Such manip |
| CVE-2026-13587 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Per |
| CVE-2026-13588 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHands |
| CVE-2026-13589 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Te |
| CVE-2026-13590 | Deferred | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the compone |
| CVE-2026-13591 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/managers/ChannelBridge.ts of the component Contact Tracking. |
| CVE-2026-13592 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the function BufWriter::append of the component EtherNe |
| CVE-2026-13593 | Deferred | 未確認 | CWE-401 | CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minify function has a memory leak when processing a document cont |
| CVE-2026-13595 | Analyzed | 未確認 | CWE-416 | A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent |
| CVE-2026-13601 | Modified | 未確認 | CWE-693 | A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help conten |
| CVE-2026-13676 | Modified | 未確認 | CWE-436, CWE-551 | fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the |
| CVE-2026-13742 | Deferred | 未確認 | CWE-367 | Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit th |
| CVE-2026-13744 | Analyzed | 未確認 | CWE-89 | Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project co |
| CVE-2026-13746 | Analyzed | 未確認 | CWE-89 | Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by supplying crafted value |
| CVE-2026-13748 | Analyzed | 未確認 | CWE-22, CWE-61, CWE-73 | Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services. An attac |
| CVE-2026-13749 | Analyzed | 未確認 | CWE-94 | Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling |
| CVE-2026-13750 | Analyzed | 未確認 | CWE-532 | Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs. An attacker co |
| CVE-2026-13751 | Analyzed | 未確認 | CWE-829, CWE-918 | Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives co |
| CVE-2026-13752 | Analyzed | 未確認 | CWE-89 | Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulner |
| CVE-2026-13757 | Modified | 未確認 | CWE-674 | A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive c |
| CVE-2026-13758 | Deferred | 未確認 | CWE-208 | CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path. The decrypt_done($tag) form compares it against |
| CVE-2026-13759 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses (WsObjectInputStream, ObjectStreamPool$ReusableInputStream, ObjectInputStreamResolver) |
| CVE-2026-13762 | Analyzed | 未確認 | CWE-444 | Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 |
| CVE-2026-13763 | Analyzed | 未確認 | CWE-444 | Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via cr |
| CVE-2026-13766 | Deferred | 未確認 | CWE-89 | DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers. The default SQL builder, a SQL::Abstract subclass, sets bindtype in its construc |
| CVE-2026-13772 | Analyzed | 未確認 | CWE-470 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class names via Class.forName() and invokes their constructors with n |
| CVE-2026-13773 | Analyzed | 未確認 | CWE-918 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale's ogclient.jar call ORB.string_to_object() on an attack |
| CVE-2026-13774 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a craft |
| CVE-2026-13775 | Modified | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-13776 | Modified | 未確認 | CWE-843 | Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-13777 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted H |
| CVE-2026-13778 | Analyzed | 未確認 | CWE-416 | Use after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: |
| CVE-2026-13779 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium securi |
| CVE-2026-13780 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-13781 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-13782 | Modified | 未確認 | CWE-416 | Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c |
| CVE-2026-13783 | Modified | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrupt |
| CVE-2026-13784 | Modified | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrupt |
| CVE-2026-13785 | Modified | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a |
| CVE-2026-13786 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) |
| CVE-2026-13787 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium securit |
| CVE-2026-13788 | Analyzed | 未確認 | CWE-416 | Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security seve |
| CVE-2026-13789 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft |
| CVE-2026-13790 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s |
| CVE-2026-13791 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute |
| CVE-2026-13792 | Analyzed | 未確認 | CWE-416 | Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur |
| CVE-2026-13793 | Undergoing Analysis | 未確認 | CWE-346 | Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-13794 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific |
| CVE-2026-13795 | Modified | 未確認 | CWE-602 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page |
| CVE-2026-13796 | Analyzed | 未確認 | CWE-472 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-13797 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-13798 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-13799 | Analyzed | 未確認 | CWE-416 | Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security se |
| CVE-2026-13800 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. ( |
| CVE-2026-13801 | Analyzed | 未確認 | CWE-472 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-13802 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a cra |
| CVE-2026-13803 | Analyzed | 未確認 | CWE-843 | Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-13804 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-13805 | Analyzed | 未確認 | CWE-416 | Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-13806 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass sit |
| CVE-2026-13807 | Analyzed | 未確認 | CWE-416 | Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code v |
| CVE-2026-13808 | Analyzed | 未確認 | CWE-20 | Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memo |
| CVE-2026-13809 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-or |
| CVE-2026-13810 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via |
| CVE-2026-13811 | Analyzed | 未確認 | CWE-416 | Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-13812 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI |
| CVE-2026-13813 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially p |
| CVE-2026-13814 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrupt |
| CVE-2026-13815 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-13816 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML p |
| CVE-2026-13817 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page |
| CVE-2026-13818 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium sec |
| CVE-2026-13819 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory rea |
| CVE-2026-13820 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted |
| CVE-2026-13821 | Analyzed | 未確認 | CWE-416 | Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-13822 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to bypass sa |
| CVE-2026-13823 | Analyzed | 未確認 | CWE-416 | Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-13824 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escala |
| CVE-2026-13825 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever |
| CVE-2026-13826 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin |
| CVE-2026-13827 | Analyzed | 未確認 | CWE-416 | Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: |
| CVE-2026-13828 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a c |
| CVE-2026-13829 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to pote |
| CVE-2026-13830 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security |
| CVE-2026-13831 | Analyzed | 未確認 | CWE-416 | Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sa |
| CVE-2026-13832 | Analyzed | 未確認 | CWE-416 | Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-13833 | Modified | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-13834 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-13835 | Analyzed | 未確認 | CWE-122 | Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu |
| CVE-2026-13836 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-13837 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: H |
| CVE-2026-13838 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security sever |
| CVE-2026-13839 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security sever |
| CVE-2026-13840 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-13841 | Analyzed | 未確認 | CWE-472 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-13842 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted |
| CVE-2026-13843 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to po |
| CVE-2026-13844 | Analyzed | 未確認 | CWE-416 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium secur |
| CVE-2026-13845 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-13846 | Analyzed | 未確認 | CWE-416 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-13847 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML p |
| CVE-2026-13848 | Analyzed | 未確認 | CWE-416 | Use after free in Forms in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-13849 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a m |
| CVE-2026-13850 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to execute arbitrary code inside a sandbox via |
| CVE-2026-13851 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via |
| CVE-2026-13852 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via |
| CVE-2026-13853 | Modified | 未確認 | CWE-416 | Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-13854 | Modified | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-13855 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code |
| CVE-2026-13856 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perfor |
| CVE-2026-13857 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoo |
| CVE-2026-13858 | Analyzed | 未確認 | CWE-125 | Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video f |
| CVE-2026-13859 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-13860 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI |
| CVE-2026-13861 | Modified | 未確認 | CWE-416 | Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-13862 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys) in Google Chrome on iOS prior to 150.0.7871.47 allowed an attacker in a privileged network position |
| CVE-2026-13863 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious |
| CVE-2026-13864 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege esc |
| CVE-2026-13865 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium |
| CVE-2026-13866 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation |
| CVE-2026-13867 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sev |
| CVE-2026-13868 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolati |
| CVE-2026-13869 | Analyzed | 未確認 | CWE-416 | Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-13870 | Analyzed | 未確認 | CWE-416 | Use after free in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-13871 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via |
| CVE-2026-13872 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via |
| CVE-2026-13873 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pa |
| CVE-2026-13874 | Analyzed | 未確認 | CWE-362 | Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chr |
| CVE-2026-13875 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain po |
| CVE-2026-13876 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass content security policy via malicious |
| CVE-2026-13877 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially |
| CVE-2026-13878 | Modified | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-13879 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory |
| CVE-2026-13880 | Modified | 未確認 | CWE-416 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-13881 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium sec |
| CVE-2026-13882 | Analyzed | 未確認 | CWE-362 | Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pa |
| CVE-2026-13883 | Modified | 未確認 | CWE-843 | Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi |
| CVE-2026-13884 | Analyzed | 未確認 | CWE-122 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to execute arbitrary code via malicious network traffic. (Chromium security severity |
| CVE-2026-13885 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-13886 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. (C |
| CVE-2026-13887 | Analyzed | 未確認 | CWE-346, CWE-352 | Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data |
| CVE-2026-13888 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-13889 | Analyzed | 未確認 | CWE-20 | Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C |
| CVE-2026-13890 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informat |
| CVE-2026-13891 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privi |
| CVE-2026-13892 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to le |
| CVE-2026-13893 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via malicious network traffic. (Chro |
| CVE-2026-13894 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass navigation restrictions via a craf |
| CVE-2026-13895 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoo |
| CVE-2026-13896 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium secur |
| CVE-2026-13897 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium s |
| CVE-2026-13898 | Analyzed | 未確認 | CWE-416 | Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-13899 | Analyzed | 未確認 | CWE-416 | Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-13900 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restricti |
| CVE-2026-13901 | Analyzed | 未確認 | CWE-20, CWE-602 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo |
| CVE-2026-13902 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-13903 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium se |
| CVE-2026-13904 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (C |
| CVE-2026-13905 | Analyzed | 未確認 | CWE-362 | Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access t |
| CVE-2026-13906 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pa |
| CVE-2026-13907 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI |
| CVE-2026-13908 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gesture |
| CVE-2026-13909 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sand |
| CVE-2026-13910 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-13911 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensi |
| CVE-2026-13912 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium sec |
| CVE-2026-13913 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak |
| CVE-2026-13914 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory vi |
| CVE-2026-13915 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially expl |
| CVE-2026-13916 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-13917 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI |
| CVE-2026-13918 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium |
| CVE-2026-13919 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi |
| CVE-2026-13920 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potenti |
| CVE-2026-13921 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a cra |
| CVE-2026-13922 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-13923 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-13924 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypas |
| CVE-2026-13925 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to exe |
| CVE-2026-13926 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigatio |
| CVE-2026-13927 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. ( |
| CVE-2026-13928 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. |
| CVE-2026-13929 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chr |
| CVE-2026-13930 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium secu |
| CVE-2026-13931 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing v |
| CVE-2026-13932 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin d |
| CVE-2026-13933 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensit |
| CVE-2026-13934 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentia |
| CVE-2026-13935 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-13936 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memo |
| CVE-2026-13937 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi |
| CVE-2026-13938 | Analyzed | 未確認 | CWE-472 | Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security sev |
| CVE-2026-13939 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perf |
| CVE-2026-13940 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory v |
| CVE-2026-13941 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium |
| CVE-2026-13942 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a crafted HTML page. (Chromium |
| CVE-2026-13943 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-13944 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in DataTransfer in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak |
| CVE-2026-13945 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform |
| CVE-2026-13946 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in ScriptInjections in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromi |
| CVE-2026-13947 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in XR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from |
| CVE-2026-13948 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofi |
| CVE-2026-13949 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Payments in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process me |
| CVE-2026-13950 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from |
| CVE-2026-13951 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e |
| CVE-2026-13952 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur |
| CVE-2026-13953 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictio |
| CVE-2026-13954 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in XML in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory |
| CVE-2026-13955 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (C |
| CVE-2026-13956 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing vi |
| CVE-2026-13957 | Analyzed | 未確認 | CWE-79 | Incorrect security UI in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or |
| CVE-2026-13958 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a craft |
| CVE-2026-13959 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromiu |
| CVE-2026-13960 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-13961 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI ge |
| CVE-2026-13962 | Analyzed | 未確認 | CWE-20 | Insufficient data validation in PDF in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via |
| CVE-2026-13963 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-orig |
| CVE-2026-13964 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. ( |
| CVE-2026-13965 | Analyzed | 未確認 | CWE-416 | Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-13966 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severit |
| CVE-2026-13967 | Analyzed | 未確認 | CWE-843 | Heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-13968 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to e |
| CVE-2026-13969 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive inform |
| CVE-2026-13970 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fr |
| CVE-2026-13971 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information fro |
| CVE-2026-13972 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-13973 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing v |
| CVE-2026-13974 | Modified | 未確認 | CWE-472 | Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium securit |
| CVE-2026-13975 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive inform |
| CVE-2026-13976 | Analyzed | 未確認 | CWE-122 | Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-13977 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Ch |
| CVE-2026-13978 | Analyzed | 未確認 | CWE-451 | Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sev |
| CVE-2026-13979 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-13980 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-13981 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se |
| CVE-2026-13982 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted H |
| CVE-2026-13983 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to sp |
| CVE-2026-13984 | Analyzed | 未確認 | CWE-290, CWE-451 | Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Med |
| CVE-2026-13985 | Analyzed | 未確認 | CWE-290, CWE-451 | Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a |
| CVE-2026-13986 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to per |
| CVE-2026-13987 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security seve |
| CVE-2026-13988 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-13989 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a cra |
| CVE-2026-13990 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DataTransfer in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to |
| CVE-2026-13991 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page |
| CVE-2026-13992 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spo |
| CVE-2026-13993 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain s |
| CVE-2026-13994 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. ( |
| CVE-2026-13995 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. |
| CVE-2026-13996 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sev |
| CVE-2026-13997 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform U |
| CVE-2026-13998 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI sp |
| CVE-2026-13999 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perfor |
| CVE-2026-14000 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-14001 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chrom |
| CVE-2026-14002 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a |
| CVE-2026-14003 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin |
| CVE-2026-14004 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-14005 | Analyzed | 未確認 | CWE-416 | Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit |
| CVE-2026-14006 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Mediu |
| CVE-2026-14007 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in PermissionsPolicy in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (C |
| CVE-2026-14008 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte |
| CVE-2026-14009 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu |
| CVE-2026-14010 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a craft |
| CVE-2026-14011 | Analyzed | 未確認 | CWE-125 | Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium se |
| CVE-2026-14012 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a craf |
| CVE-2026-14013 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: M |
| CVE-2026-14014 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-14015 | Analyzed | 未確認 | CWE-362 | Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-14016 | Analyzed | 未確認 | CWE-352 | Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-14017 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb |
| CVE-2026-14018 | Analyzed | 未確認 | CWE-416 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium secur |
| CVE-2026-14019 | Analyzed | 未確認 | CWE-522 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se |
| CVE-2026-14020 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofin |
| CVE-2026-14021 | Analyzed | 未確認 | CWE-20 | Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin |
| CVE-2026-14022 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origi |
| CVE-2026-14023 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. ( |
| CVE-2026-14024 | Analyzed | 未確認 | CWE-416 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit hea |
| CVE-2026-14025 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap |
| CVE-2026-14026 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing v |
| CVE-2026-14027 | Analyzed | 未確認 | CWE-416 | Use after free in SignIn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrup |
| CVE-2026-14028 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform U |
| CVE-2026-14030 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in SplitView in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof |
| CVE-2026-14031 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in File Input in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security seve |
| CVE-2026-14032 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a |
| CVE-2026-14033 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium se |
| CVE-2026-14034 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chrom |
| CVE-2026-14035 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a |
| CVE-2026-14036 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium se |
| CVE-2026-14037 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e |
| CVE-2026-14038 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially |
| CVE-2026-14039 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium se |
| CVE-2026-14040 | Analyzed | 未確認 | CWE-416 | Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruptio |
| CVE-2026-14041 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium secur |
| CVE-2026-14042 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium securi |
| CVE-2026-14043 | Analyzed | 未確認 | CWE-416 | Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi |
| CVE-2026-14044 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cra |
| CVE-2026-14045 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origi |
| CVE-2026-14046 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chrom |
| CVE-2026-14047 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to bypass content se |
| CVE-2026-14048 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memor |
| CVE-2026-14049 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive infor |
| CVE-2026-14050 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-14051 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informati |
| CVE-2026-14052 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chr |
| CVE-2026-14053 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data v |
| CVE-2026-14054 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se |
| CVE-2026-14055 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to |
| CVE-2026-14056 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perfor |
| CVE-2026-14057 | Analyzed | 未確認 | CWE-346 | Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security sev |
| CVE-2026-14058 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Parser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium sec |
| CVE-2026-14059 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Related-Website-Sets in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromi |
| CVE-2026-14060 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious |
| CVE-2026-14061 | Analyzed | 未確認 | CWE-284 | Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted |
| CVE-2026-14062 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Views in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potent |
| CVE-2026-14063 | Analyzed | 未確認 | CWE-125, CWE-787 | Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via malicious netw |
| CVE-2026-14064 | Analyzed | 未確認 | CWE-416 | Use after free in PageInfo in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary |
| CVE-2026-14065 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigati |
| CVE-2026-14066 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafte |
| CVE-2026-14067 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security seve |
| CVE-2026-14068 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject ar |
| CVE-2026-14069 | Analyzed | 未確認 | CWE-472 | Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-14070 | Analyzed | 未確認 | CWE-457 | Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
| CVE-2026-14071 | Analyzed | 未確認 | CWE-1300, CWE-203 | Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-14072 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-14073 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Ch |
| CVE-2026-14074 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C |
| CVE-2026-14075 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Ch |
| CVE-2026-14076 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium se |
| CVE-2026-14077 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Select in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML pa |
| CVE-2026-14078 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebRTC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chr |
| CVE-2026-14079 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium securit |
| CVE-2026-14080 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicio |
| CVE-2026-14081 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potentially |
| CVE-2026-14082 | Analyzed | 未確認 | CWE-362 | Race in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-14083 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML p |
| CVE-2026-14084 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious netw |
| CVE-2026-14085 | Analyzed | 未確認 | CWE-1300 | Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security seve |
| CVE-2026-14086 | Analyzed | 未確認 | CWE-602 | Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security sever |
| CVE-2026-14087 | Analyzed | 未確認 | CWE-20, CWE-787 | Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corr |
| CVE-2026-14088 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Canvas in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a craft |
| CVE-2026-14089 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in PopupBlocker in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI |
| CVE-2026-14090 | Analyzed | 未確認 | CWE-125 | Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read vi |
| CVE-2026-14091 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-14092 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via malicious netw |
| CVE-2026-14093 | Modified | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-14094 | Analyzed | 未確認 | CWE-416 | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium sec |
| CVE-2026-14095 | Modified | 未確認 | CWE-20 | Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb |
| CVE-2026-14096 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin dat |
| CVE-2026-14097 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perf |
| CVE-2026-14098 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-14099 | Modified | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially expl |
| CVE-2026-14100 | Analyzed | 未確認 | CWE-20 | Insufficient data validation in NetworkCache in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security |
| CVE-2026-14101 | Analyzed | 未確認 | CWE-269, CWE-693 | Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-14102 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sev |
| CVE-2026-14103 | Analyzed | 未確認 | CWE-416 | Use after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HT |
| CVE-2026-14104 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf |
| CVE-2026-14105 | Analyzed | 未確認 | CWE-346 | Insufficient policy enforcement in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-14106 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentia |
| CVE-2026-14107 | Analyzed | 未確認 | CWE-416 | Use after free in Scheduling in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-14108 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security sev |
| CVE-2026-14109 | Analyzed | 未確認 | CWE-20, CWE-602 | Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-14110 | Analyzed | 未確認 | CWE-1021, CWE-451 | Inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severi |
| CVE-2026-14111 | Analyzed | 未確認 | CWE-416 | Use after free in WebProtect in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a craft |
| CVE-2026-14112 | Analyzed | 未確認 | CWE-203 | Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potent |
| CVE-2026-14113 | Analyzed | 未確認 | CWE-416 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc |
| CVE-2026-14114 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium se |
| CVE-2026-14115 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege e |
| CVE-2026-14116 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to l |
| CVE-2026-14117 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI ge |
| CVE-2026-14118 | Analyzed | 未確認 | CWE-20, CWE-290 | Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-orig |
| CVE-2026-14119 | Analyzed | 未確認 | CWE-843 | Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from pro |
| CVE-2026-14120 | Analyzed | 未確認 | CWE-20, CWE-693 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-14121 | Modified | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security |
| CVE-2026-14122 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a craf |
| CVE-2026-14123 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML p |
| CVE-2026-14124 | Analyzed | 未確認 | CWE-269 | Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malici |
| CVE-2026-14125 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page |
| CVE-2026-14126 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security seve |
| CVE-2026-14127 | Analyzed | 未確認 | CWE-20, CWE-451 | Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a cra |
| CVE-2026-14128 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted |
| CVE-2026-14129 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to pe |
| CVE-2026-14130 | Analyzed | 未確認 | CWE-20, CWE-451 | Incorrect security UI in Omnibox in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-14131 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform U |
| CVE-2026-14132 | Modified | 未確認 | CWE-451 | Inappropriate implementation in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: |
| CVE-2026-14133 | Modified | 未確認 | CWE-362 | Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-14134 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium secu |
| CVE-2026-14135 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoof |
| CVE-2026-14136 | Analyzed | 未確認 | CWE-451 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page |
| CVE-2026-14137 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI |
| CVE-2026-14138 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures t |
| CVE-2026-14139 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoo |
| CVE-2026-14140 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch |
| CVE-2026-14141 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page |
| CVE-2026-14142 | Modified | 未確認 | CWE-1021, CWE-451 | Inappropriate implementation in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a c |
| CVE-2026-14143 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security sever |
| CVE-2026-14144 | Analyzed | 未確認 | CWE-451 | Incorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a |
| CVE-2026-14145 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-14146 | Analyzed | 未確認 | CWE-200 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-14147 | Analyzed | 未確認 | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium |
| CVE-2026-14148 | Analyzed | 未確認 | CWE-843 | Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Ch |
| CVE-2026-14149 | Analyzed | 未確認 | CWE-416 | Use after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: L |
| CVE-2026-14150 | Modified | 未確認 | CWE-20 | Insufficient validation of untrusted input in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofi |
| CVE-2026-14151 | Modified | 未確認 | CWE-669, CWE-693 | Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-14152 | Modified | 未確認 | CWE-787 | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es |
| CVE-2026-14153 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing |
| CVE-2026-14154 | Analyzed | 未確認 | CWE-451 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing vi |
| CVE-2026-14155 | Analyzed | 未確認 | CWE-284 | Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s |
| CVE-2026-14156 | Analyzed | 未確認 | CWE-284, CWE-862 | Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin |
| CVE-2026-14160 | Deferred | 未確認 | CWE-367 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race Conditions. This issue affects Escargot: bab3a5797557014ce3c |
| CVE-2026-14161 | Deferred | 未確認 | CWE-200 | Hospital Quening Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API doc |
| CVE-2026-14162 | Deferred | 未確認 | CWE-306 | Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API doc |
| CVE-2026-14164 | Awaiting Analysis | 未確認 | CWE-415 | A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed |
| CVE-2026-14178 | Deferred | 未確認 | CWE-416 | openGauss 在处理带 NLS 参数的 to_timestamp 调用时，to_timestamp_with_fmt_nls() 会将 nls_fmt_str 保存到 u_sess->parser_cxt.nls_fmt_str。在 seqscan + sort 执行路径下，该字符串原本被分配在 SeqScan 的表达式上下文中；当 SeqScan 完 |
| CVE-2026-14209 | Modified | 未確認 | CWE-639 | A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv |
| CVE-2026-14241 | Modified | 未確認 | CWE-119, CWE-787 | Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploite |
| CVE-2026-1450 | Deferred | 未確認 | CWE-79 | The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mode' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitiza |
| CVE-2026-1451 | Deferred | 未確認 | CWE-79 | The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'a' parameter in versions up to, and including, 0.6.2 due to insufficient input sanitizatio |
| CVE-2026-1500 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could ha |
| CVE-2026-1606 | Analyzed | 未確認 | CWE-94 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have |
| CVE-2026-1764 | Analyzed | 未確認 | CWE-125 | A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a missing bounds chec |
| CVE-2026-1765 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the `tracker-extract-mp3` component of GNOME localsearch (previously known as tracker-miners). This vulnerability, a heap buffer overflow, occurs when processin |
| CVE-2026-1766 | Analyzed | 未確認 | CWE-805 | A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerabi |
| CVE-2026-1767 | Analyzed | 未確認 | CWE-805 | A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit this heap buffer overf |
| CVE-2026-1784 | Modified | 未確認 | CWE-15 | The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a |
| CVE-2026-1829 | Deferred | 未確認 | CWE-94 | The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'et_pb_text' shortcode 'cvdb_ |
| CVE-2026-1836 | Deferred | 未確認 | CWE-257 | The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and |
| CVE-2026-1840 | Deferred | 未確認 | CWE-306 | The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication controls on critical system functions. This weakness exposes esse |
| CVE-2026-1856 | Deferred | 未確認 | CWE-79 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom booking field labels in all versions up to, and including, 1.4.4 due t |
| CVE-2026-1869 | Deferred | 未確認 | CWE-862 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vul |
| CVE-2026-1871 | Analyzed | 未確認 | CWE-121 | TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be trig |
| CVE-2026-20175 | Undergoing Analysis | 未確認 | CWE-73 | A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, po |
| CVE-2026-20178 | Analyzed | 未確認 | CWE-601 | A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed |
| CVE-2026-20181 | Analyzed | 未確認 | CWE-22 | A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To ex |
| CVE-2026-20190 | Analyzed | 未確認 | CWE-285 | A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improp |
| CVE-2026-2021 | Deferred | 未確認 | CWE-79 | The Slideshow Gallery LITE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alwaysauto' shortcode attribute in all versions up to, and including, 1.8.5. T |
| CVE-2026-20220 | Analyzed | 未確認 | CWE-74 | A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to execute arbitrary commands on an a |
| CVE-2026-20230 | Analyzed | 掲載 | CWE-918 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthentic |
| CVE-2026-20233 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco |
| CVE-2026-20245 | Analyzed | 掲載 | CWE-116 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, |
| CVE-2026-20246 | Analyzed | 未確認 | CWE-269 | A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerabili |
| CVE-2026-20251 | Analyzed | 未確認 | CWE-502 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk |
| CVE-2026-20252 | Analyzed | 未確認 | CWE-918 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411 |
| CVE-2026-20253 | Analyzed | 掲載 | CWE-306 | In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service |
| CVE-2026-20254 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-p |
| CVE-2026-20255 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-p |
| CVE-2026-20256 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-p |
| CVE-2026-20257 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-p |
| CVE-2026-20258 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-p |
| CVE-2026-20259 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.13 |
| CVE-2026-20260 | Awaiting Analysis | 未確認 | CWE-117 | In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute (ANSI) escape |
| CVE-2026-20262 | Analyzed | 掲載 | CWE-22 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the |
| CVE-2026-20265 | Analyzed | 未確認 | CWE-1188 | In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests |
| CVE-2026-20266 | Analyzed | 未確認 | CWE-78 | In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The v |
| CVE-2026-20452 | Analyzed | 未確認 | CWE-122 | In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges |
| CVE-2026-20453 | Analyzed | 未確認 | CWE-787 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20454 | Analyzed | 未確認 | CWE-367 | In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System |
| CVE-2026-20455 | Analyzed | 未確認 | CWE-787 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20456 | Analyzed | 未確認 | CWE-787 | In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interacti |
| CVE-2026-2049 | Deferred | 未確認 | CWE-122, CWE-131 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-2050 | Modified | 未確認 | CWE-122, CWE-131 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-2053 | Analyzed | 未確認 | CWE-918 | The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validate or restrict user-controlled input within these headers. This om |
| CVE-2026-20746 | Awaiting Analysis | 未確認 | CWE-401 | Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and cop |
| CVE-2026-21017 | Analyzed | 未確認 | Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files. | |
| CVE-2026-21025 | Analyzed | 未確認 | Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21026 | Analyzed | 未確認 | Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information. | |
| CVE-2026-21027 | Analyzed | 未確認 | Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function. | |
| CVE-2026-21028 | Analyzed | 未確認 | Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21029 | Analyzed | 未確認 | Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations. | |
| CVE-2026-21030 | Analyzed | 未確認 | Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions. | |
| CVE-2026-21031 | Analyzed | 未確認 | CWE-863 | Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerabilit |
| CVE-2026-21032 | Analyzed | 未確認 | Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script. | |
| CVE-2026-21033 | Analyzed | 未確認 | Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script. | |
| CVE-2026-21034 | Analyzed | 未確認 | Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configura | |
| CVE-2026-21035 | Analyzed | 未確認 | Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attackers to access sensitive information. | |
| CVE-2026-21036 | Analyzed | 未確認 | CWE-863 | Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information. |
| CVE-2026-21037 | Analyzed | 未確認 | Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege. | |
| CVE-2026-21038 | Analyzed | 未確認 | CWE-125 | Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory. |
| CVE-2026-21404 | Analyzed | 未確認 | CWE-798 | NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a l |
| CVE-2026-21734 | Analyzed | 未確認 | CWE-823 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On ce |
| CVE-2026-21768 | Deferred | 未確認 | CWE-20, CWE-79 | The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious conte |
| CVE-2026-21825 | Analyzed | 未確認 | CWE-79 | HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center. An attacker could execute arbitrary JavaScript in the vict |
| CVE-2026-21826 | Analyzed | 未確認 | CWE-601 | HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause the application to be |
| CVE-2026-21837 | Analyzed | 未確認 | CWE-78 | HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typic |
| CVE-2026-22054 | Analyzed | 未確認 | CWE-259 | Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations |
| CVE-2026-22055 | Analyzed | 未確認 | CWE-259 | Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. |
| CVE-2026-22078 | Deferred | 未確認 | CWE-266 | Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel. |
| CVE-2026-22164 | Deferred | 未確認 | CWE-122 | Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. By creating resources of certain types and presenting a |
| CVE-2026-22283 | Modified | 未確認 | CWE-829 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote a |
| CVE-2026-22312 | Awaiting Analysis | 未確認 | CWE-798 | The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be used by an attacker to get access to system settings, modify |
| CVE-2026-22313 | Awaiting Analysis | 未確認 | CWE-78 | The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability an authenticated attack |
| CVE-2026-22325 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions. |
| CVE-2026-22326 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions. |
| CVE-2026-22327 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions. |
| CVE-2026-22328 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions. |
| CVE-2026-22329 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions. |
| CVE-2026-22330 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Right Way <= 4.0 versions. |
| CVE-2026-22331 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions. |
| CVE-2026-22332 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions. |
| CVE-2026-22334 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions. |
| CVE-2026-22335 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions. |
| CVE-2026-22338 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions. |
| CVE-2026-22339 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions. |
| CVE-2026-22340 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions. |
| CVE-2026-22342 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions. |
| CVE-2026-22343 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions. |
| CVE-2026-2238 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have |
| CVE-2026-22551 | Analyzed | 未確認 | CWE-201, CWE-829 | In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrary external URLs without restriction. Comb |
| CVE-2026-22674 | Deferred | 未確認 | CWE-79 | Hashgraph Guardian through 3.6.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARD_REGISTRY role to i |
| CVE-2026-22872 | Analyzed | 未確認 | CWE-20, CWE-863 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin privileges. Although the TenantResource RawItems processing log |
| CVE-2026-22879 | Deferred | 未確認 | CWE-129 | A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2). A specially crafted DICOM file can le |
| CVE-2026-22893 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the |
| CVE-2026-22899 | Modified | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a |
| CVE-2026-22926 | Awaiting Analysis | 未確認 | CWE-22 | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. |
| CVE-2026-2299 | Analyzed | 未確認 | CWE-862 | The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google acc |
| CVE-2026-23513 | Deferred | 未確認 | CWE-863 | FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, a query-construction flaw in client list endpoints allowed authenticated clien |
| CVE-2026-23638 | Analyzed | 未確認 | CWE-639 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated a |
| CVE-2026-2379 | Awaiting Analysis | 未確認 | CWE-672 | On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibit unexpected behavior in specific cases. Physical interface |
| CVE-2026-2381 | Deferred | 未確認 | CWE-862 | The WooCommerce Stripe Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_pay_for_order()` funct |
| CVE-2026-2382 | Deferred | 未確認 | CWE-79 | The FPW Category Thumbnails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'fpw_fs_get_file' AJAX action in all versions up to, and |
| CVE-2026-23879 | Deferred | 未確認 | CWE-59 | py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file wri |
| CVE-2026-23970 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7 <= 3.2.8 versions. |
| CVE-2026-24064 | Deferred | 未確認 | CWE-426 | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with h |
| CVE-2026-24065 | Deferred | 未確認 | CWE-367 | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. The helper validates connecting XPC clie |
| CVE-2026-24066 | Deferred | 未確認 | CWE-296 | Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.pr |
| CVE-2026-24067 | Deferred | 未確認 | CWE-367 | Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.pr |
| CVE-2026-24085 | Analyzed | 未確認 | CWE-121 | Memory Corruption when processing display command line information due to improper initialization of a variable. |
| CVE-2026-24087 | Analyzed | 未確認 | CWE-1286 | Memory corruption while processing fastboot OEM commands. |
| CVE-2026-24088 | Analyzed | 未確認 | CWE-306 | Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. |
| CVE-2026-24089 | Analyzed | 未確認 | CWE-1286 | Memory corruption while processing fastboot commands with invalid input. |
| CVE-2026-24090 | Analyzed | 未確認 | CWE-306 | Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. |
| CVE-2026-24091 | Analyzed | 未確認 | CWE-1286 | Memory corruption while processing fastboot commands with improperly formatted input. |
| CVE-2026-24092 | Analyzed | 未確認 | CWE-1286 | Memory Corruption when processing fastboot commands to set display mode. |
| CVE-2026-24155 | Analyzed | 未確認 | CWE-94 | NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, |
| CVE-2026-24180 | Analyzed | 未確認 | CWE-122 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execut |
| CVE-2026-24181 | Analyzed | 未確認 | CWE-129 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execut |
| CVE-2026-24221 | Analyzed | 未確認 | CWE-502 | NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code ex |
| CVE-2026-24228 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code |
| CVE-2026-24237 | Analyzed | 未確認 | CWE-502 | NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code ex |
| CVE-2026-2425 | Deferred | 未確認 | CWE-79 | The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions up to, and including, 2.0.0.1 due to |
| CVE-2026-24315 | Awaiting Analysis | 未確認 | CWE-35 | SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by st |
| CVE-2026-24349 | Analyzed | 未確認 | CWE-313 | A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V1 |
| CVE-2026-24547 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions. |
| CVE-2026-24575 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WishList Member X <= 3.29.0 versions. |
| CVE-2026-24610 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions. |
| CVE-2026-24611 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions. |
| CVE-2026-24618 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Ha |
| CVE-2026-24637 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions. |
| CVE-2026-2467 | Modified | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before |
| CVE-2026-2470 | Deferred | 未確認 | CWE-863 | The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.0.9. This is due t |
| CVE-2026-24716 | Modified | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl |
| CVE-2026-24717 | Modified | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vu |
| CVE-2026-24719 | Modified | 未確認 | CWE-78 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the |
| CVE-2026-24720 | Modified | 未確認 | CWE-770 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit t |
| CVE-2026-24724 | Modified | 未確認 | CWE-863 | An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass in |
| CVE-2026-24751 | Analyzed | 未確認 | CWE-79 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user int |
| CVE-2026-24752 | Analyzed | 未確認 | CWE-79 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user int |
| CVE-2026-24753 | Analyzed | 未確認 | CWE-639 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated u |
| CVE-2026-24754 | Analyzed | 未確認 | CWE-79 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated attacker to execute arbitr |
| CVE-2026-24755 | Analyzed | 未確認 | CWE-639 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated u |
| CVE-2026-24756 | Analyzed | 未確認 | CWE-639 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated u |
| CVE-2026-24761 | Analyzed | 未確認 | CWE-639 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated u |
| CVE-2026-24782 | Analyzed | 未確認 | CWE-89 | Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attack |
| CVE-2026-2500 | Deferred | 未確認 | CWE-22 | The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. This is due to the `qckply_data()` function passing the user- |
| CVE-2026-2508 | Deferred | 未確認 | CWE-89 | The Gravity Forms Booking plugin for WordPress is vulnerable to time-based SQL Injection via the ‘staff_id’ parameter in all versions up to, and including, 2.7.1 due to insufficien |
| CVE-2026-25089 | Analyzed | 掲載 | CWE-78 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through |
| CVE-2026-25119 | Deferred | 未確認 | CWE-290 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, when ENABLE_REVERSE_PROXY_AUTHENTICATION is enabled, Gogs accepts the configured authentication header (default: X- |
| CVE-2026-25258 | Analyzed | 未確認 | CWE-125 | Memory corruption while processing IOCTL calls for escape operations. |
| CVE-2026-25259 | Analyzed | 未確認 | CWE-787 | Memory corruption while processing multiple IOCTL command for escape operations. |
| CVE-2026-25260 | Analyzed | 未確認 | CWE-367 | Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications. |
| CVE-2026-25276 | Analyzed | 未確認 | CWE-129 | Memory corruption while using Strongbox due to missing bounds check. |
| CVE-2026-25277 | Analyzed | 未確認 | CWE-120 | Memory corruption while using Strongbox due to buffer overflow. |
| CVE-2026-25425 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in User Registration <= 5.1.2 versions. |
| CVE-2026-25439 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions. |
| CVE-2026-25440 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions. |
| CVE-2026-25446 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions. |
| CVE-2026-25470 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions. |
| CVE-2026-25550 | Awaiting Analysis | 未確認 | CWE-306, CWE-502 | Seagull Software BarTender 2010, 2016, and 2019 contain an unauthenticated remote code execution vulnerability in the .NET Remoting service exposed on TCP port 7375 via BtSystem.Se |
| CVE-2026-25551 | Awaiting Analysis | 未確認 | CWE-502 | Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows low-privileged local users to escalate privileges. The DataServiceS |
| CVE-2026-25555 | Deferred | 未確認 | CWE-305 | OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin acces |
| CVE-2026-25557 | Deferred | 未確認 | CWE-79 | Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting vulnerability in index.php where the dir parameter value is reflected without HTML enc |
| CVE-2026-25558 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authenticated administrators to inject malicious JavaScript by uplo |
| CVE-2026-25559 | Deferred | 未確認 | CWE-22 | OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary file read, write, and de |
| CVE-2026-25599 | Awaiting Analysis | 未確認 | CWE-306, CWE-319, CWE-79 | Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead to |
| CVE-2026-25600 | Awaiting Analysis | 未確認 | CWE-798 | The PDBM application relies on a static, hard‑coded secret embedded in the PDBM.exe executable. This secret is used by the application’s encryption routines, including the functi |
| CVE-2026-25620 | Analyzed | 未確認 | CWE-78 | An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). |
| CVE-2026-25621 | Analyzed | 未確認 | CWE-78 | A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue uni |
| CVE-2026-25622 | Analyzed | 未確認 | CWE-78 | A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an administ |
| CVE-2026-25623 | Analyzed | 未確認 | CWE-78 | An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Authenticat |
| CVE-2026-25624 | Analyzed | 未確認 | CWE-79 | An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGF |
| CVE-2026-25657 | Analyzed | 未確認 | CWE-228 | Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sen |
| CVE-2026-25658 | Analyzed | 未確認 | CWE-230 | Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a specially |
| CVE-2026-25659 | Analyzed | 未確認 | CWE-230 | Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a specially |
| CVE-2026-25688 | Analyzed | 未確認 | CWE-87 | Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. AI-generated response content was rendered in the |
| CVE-2026-25699 | Analyzed | 未確認 | CWE-359 | Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked pr |
| CVE-2026-25700 | Modified | 未確認 | CWE-1259 | Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were no |
| CVE-2026-25707 | Analyzed | 未確認 | CWE-23 | A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on |
| CVE-2026-25855 | Deferred | 未確認 | CWE-78 | OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files (.bat.ps1.s |
| CVE-2026-25856 | Deferred | 未確認 | CWE-94 | OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticated users to execute arbitrary C# code on the server host by c |
| CVE-2026-25860 | Deferred | 未確認 | CWE-79 | OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's |
| CVE-2026-25861 | Deferred | 未確認 | CWE-916 | QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by exploiting the use of |
| CVE-2026-25865 | Deferred | 未確認 | CWE-428 | Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call t |
| CVE-2026-25879 | Deferred | 未確認 | CWE-89, CWE-94 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is influenceable by pro |
| CVE-2026-2596 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2604 | Awaiting Analysis | 未確認 | CWE-73 | A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI con |
| CVE-2026-26142 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. |
| CVE-2026-26236 | Modified | 未確認 | CWE-862 | A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthoriz |
| CVE-2026-26237 | Modified | 未確認 | CWE-359, CWE-862 | A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthoriz |
| CVE-2026-26239 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or c |
| CVE-2026-26240 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have al |
| CVE-2026-26241 | Modified | 未確認 | CWE-121 | A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have al |
| CVE-2026-26378 | Analyzed | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice features |
| CVE-2026-26379 | Analyzed | 未確認 | CWE-918 | Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform interna |
| CVE-2026-2638 | Awaiting Analysis | 未確認 | CWE-367 | A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipul |
| CVE-2026-26422 | Deferred | 未確認 | CWE-732 | clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation. |
| CVE-2026-2674 | Modified | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers. This issue affects Connext Professional |
| CVE-2026-2675 | Modified | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. This issue affects Connext Professional: f |
| CVE-2026-26824 | Modified | 未確認 | CWE-457 | libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in rea |
| CVE-2026-26825 | Modified | 未確認 | CWE-908 | A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWorkBook() and is triggered by uninitialize |
| CVE-2026-27041 | Deferred | 未確認 | CWE-434 | Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. |
| CVE-2026-27053 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions. |
| CVE-2026-27089 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions. |
| CVE-2026-27145 | Awaiting Analysis | 未確認 | CWE-606 | (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute r |
| CVE-2026-27333 | Deferred | 未確認 | CWE-502 | Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site <= 7.3.23 versions. |
| CVE-2026-27351 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crew HRM: from n/a thro |
| CVE-2026-27366 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions. |
| CVE-2026-27395 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. |
| CVE-2026-27400 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions. |
| CVE-2026-27407 | Deferred | 未確認 | CWE-266 | Editor Privilege Escalation in AI Engine <= 3.4.9 versions. |
| CVE-2026-27410 | Deferred | 未確認 | CWE-502 | Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions. |
| CVE-2026-27429 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions. |
| CVE-2026-27604 | Deferred | 未確認 | CWE-200, CWE-306, CWE-862, CWE-863 | FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the API role handling allo |
| CVE-2026-27671 | Awaiting Analysis | 未確認 | CWE-121 | Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC |
| CVE-2026-27708 | Deferred | 未確認 | CWE-284, CWE-639, CWE-862 | FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, the Servicecustom Client API's __call method accepts an order_id parameter and |
| CVE-2026-27788 | Deferred | 未確認 | CWE-732 | Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated |
| CVE-2026-27868 | Deferred | 未確認 | CWE-201 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could obta |
| CVE-2026-27869 | Deferred | 未確認 | CWE-770 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, wit |
| CVE-2026-27870 | Deferred | 未確認 | CWE-79 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration action IS required) who has the vulnerable software could, introd |
| CVE-2026-27878 | Analyzed | 未確認 | CWE-400 | A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash. This |
| CVE-2026-27881 | Deferred | 未確認 | CWE-639 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, `GET /api/v1/deployments/{uuid}` in DeployController.ph |
| CVE-2026-27882 | Deferred | 未確認 | CWE-208 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.461, the GitLab webhook endpoint uses a non-constant-time st |
| CVE-2026-27883 | Deferred | 未確認 | CWE-639 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the `GET /api/v1/deployments/{uuid}` endpoint allows an |
| CVE-2026-27955 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the executeInDocker() helper wraps commands in bash -c |
| CVE-2026-27956 | Deferred | 未確認 | CWE-639 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, `GET /api/v1/servers/{server_uuid}/domains?uuid={app_uu |
| CVE-2026-27957 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, an authenticated command injection vulnerability in the |
| CVE-2026-28116 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emilia Projects Progress Planner allows Stored XSS. This issue affects Progre |
| CVE-2026-2815 | Awaiting Analysis | 未確認 | CWE-339 | Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys |
| CVE-2026-28237 | Analyzed | 未確認 | CWE-770 | Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability. |
| CVE-2026-28262 | Awaiting Analysis | 未確認 | CWE-59 | Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access |
| CVE-2026-2827 | Deferred | 未確認 | CWE-79 | The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter in versions up to, and including, 1.4.31 due t |
| CVE-2026-28299 | Analyzed | 未確認 | CWE-770 | SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memor |
| CVE-2026-28301 | Awaiting Analysis | 未確認 | CWE-601 | A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website. |
| CVE-2026-28318 | Analyzed | 掲載 | CWE-400 | SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provi |
| CVE-2026-28322 | Awaiting Analysis | 未確認 | CWE-20 | SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. |
| CVE-2026-28381 | Analyzed | 未確認 | CWE-284 | The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana serv |
| CVE-2026-28385 | Analyzed | 未確認 | CWE-918 | In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticated users with the can_create_imag |
| CVE-2026-2842 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-28496 | Deferred | 未確認 | CWE-1336 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection (SSTI) vulnerability in the template renderin |
| CVE-2026-28511 | Analyzed | 未確認 | CWE-200 | eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that inc |
| CVE-2026-28573 | Modified | 未確認 | CWE-862 | In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution |
| CVE-2026-28575 | Analyzed | 未確認 | CWE-400 | In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible memory exhaustion attack due to a |
| CVE-2026-28576 | Analyzed | 未確認 | CWE-89 | In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution pri |
| CVE-2026-28577 | Analyzed | 未確認 | CWE-1021 | In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additio |
| CVE-2026-28578 | Analyzed | 未確認 | CWE-20 | In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service w |
| CVE-2026-28580 | Analyzed | 未確認 | CWE-120 | In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution pri |
| CVE-2026-28581 | Modified | 未確認 | CWE-476 | In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local escalation |
| CVE-2026-28586 | Analyzed | 未確認 | CWE-269 | In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no addit |
| CVE-2026-28587 | Analyzed | 未確認 | CWE-862 | In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. This could lead to local information disclosu |
| CVE-2026-28615 | Analyzed | 未確認 | CWE-862 | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with no additional executi |
| CVE-2026-28701 | Analyzed | 未確認 | CWE-22 | Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system p |
| CVE-2026-28742 | Deferred | 未確認 | CWE-321 | Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmware image. Once this salt is recovered from any device, an att |
| CVE-2026-28898 | Analyzed | 未確認 | CWE-116 | swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message. swift-nio-http2 1. |
| CVE-2026-28979 | Modified | 未確認 | CWE-125, CWE-787 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS |
| CVE-2026-29034 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29114 | Deferred | 未確認 | CWE-538 | A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker |
| CVE-2026-29115 | Deferred | 未確認 | CWE-617 | A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the syste |
| CVE-2026-29116 | Deferred | 未確認 | CWE-617 | A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the sys |
| CVE-2026-29167 | Analyzed | 未確認 | CWE-416 | Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recomm |
| CVE-2026-29170 | Analyzed | 未確認 | CWE-79 | A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either vi |
| CVE-2026-29509 | Deferred | 未確認 | CWE-22 | Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_withi |
| CVE-2026-30040 | Deferred | 未確認 | CWE-122 | A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary code in the context of the current process via supplying a |
| CVE-2026-30041 | Deferred | 未確認 | CWE-400 | An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via supplying a crafted |
| CVE-2026-3011 | Deferred | 未確認 | CWE-79 | The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the recipe block's 'summary' and 'notes' attributes in all versions up to, and inc |
| CVE-2026-30120 | Analyzed | 未確認 | CWE-94 | remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability. |
| CVE-2026-30121 | Analyzed | 未確認 | CWE-123 | remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability. |
| CVE-2026-30141 | Deferred | 未確認 | CWE-120 | An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a denial of service (crash) or potentially exec |
| CVE-2026-3018 | Deferred | 未確認 | CWE-89 | The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpmlsubscriber_id’ parameter in all versions up to, and including, 4.13 due to insufficient |
| CVE-2026-30586 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE_SCHEMA, Memo Rendering Component, and Public |
| CVE-2026-30649 | Modified | 未確認 | CWE-121 | Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component |
| CVE-2026-30650 | Modified | 未確認 | CWE-120 | A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware ver |
| CVE-2026-30652 | Modified | 未確認 | CWE-120 | A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. T |
| CVE-2026-30799 | Modified | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. This issue affects Connext Professional: from 7. |
| CVE-2026-30802 | Modified | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. This issue affects Connext Micro: from 4.0.0 before 4.3.0, from 2.4.5 before 2.4.*. |
| CVE-2026-30803 | Modified | 未確認 | CWE-191 | Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. This issue affects Connext Micro: from 4.0.0 before 4.3.0. |
| CVE-2026-3088 | Analyzed | 未確認 | CWE-787 | Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests. |
| CVE-2026-30963 | Analyzed | 未確認 | CWE-20 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a w |
| CVE-2026-31016 | Deferred | 未確認 | CWE-352 | Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via the IdentityServer account profile endpoi |
| CVE-2026-3176 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have all |
| CVE-2026-31928 | Analyzed | 未確認 | CWE-798 | The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or o |
| CVE-2026-31942 | Analyzed | 未確認 | CWE-862 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.7.6, an Insecure Direct Object Reference (IDOR) vulnerability exists i |
| CVE-2026-3195 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buf |
| CVE-2026-3196 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially le |
| CVE-2026-31978 | Deferred | 未確認 | CWE-22, CWE-284 | motionEye (mEye) is an online interface for motion software, which is a video surveillance program with motion detection. Versions prior to 0.44.0 are vulnerable to path traversal |
| CVE-2026-3198 | Analyzed | 未確認 | CWE-284 | MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` |
| CVE-2026-32174 | Analyzed | 未確認 | CWE-287 | Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-32193 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally. |
| CVE-2026-32208 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-32250 | Deferred | 未確認 | CWE-79 | NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in version 2.2.4 in the id parameter of the endpoint `/ind |
| CVE-2026-32315 | Deferred | 未確認 | CWE-200, CWE-522, CWE-732 | motionEye (mEye) is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motione |
| CVE-2026-32325 | Deferred | 未確認 | CWE-268 | Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the ser |
| CVE-2026-3238 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly valid |
| CVE-2026-32625 | Analyzed | 未確認 | CWE-200 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VA |
| CVE-2026-32652 | Analyzed | 未確認 | CWE-1392 | Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged attacker with console access could potentially exploit this vul |
| CVE-2026-32682 | Analyzed | 未確認 | CWE-129 | When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or modify GRPCRoute resources can cause the NGINX Gateway Fabr |
| CVE-2026-32685 | Deferred | 未確認 | CWE-22 | Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The d |
| CVE-2026-3276 | Awaiting Analysis | 未確認 | CWE-407 | unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combinin |
| CVE-2026-32804 | Modified | 未確認 | CWE-287 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially |
| CVE-2026-32833 | Deferred | 未確認 | CWE-78 | Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary commands by injectin |
| CVE-2026-32856 | Deferred | 未確認 | CWE-79 | Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbit |
| CVE-2026-32966 | Modified | 未確認 | CWE-863 | DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. |
| CVE-2026-32967 | Modified | 未確認 | CWE-863 | Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended |
| CVE-2026-3297 | Deferred | 未確認 | CWE-79 | The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Anchor block in versions up to, and including, |
| CVE-2026-33113 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-33235 | Deferred | 未確認 | CWE-400 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions prior to 0.6.52, the Fill Text Template block |
| CVE-2026-33244 | Analyzed | 未確認 | CWE-79 | React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP `Location` header va |
| CVE-2026-33245 | Analyzed | 未確認 | CWE-79 | React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross- |
| CVE-2026-3326 | Deferred | 未確認 | CWE-89 | The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, |
| CVE-2026-3329 | Analyzed | 未確認 | CWE-307 | A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints. |
| CVE-2026-33398 | Deferred | 未確認 | CWE-285 | NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/pages/forum/get_quotes.php` only checks whether the caller is logged in, then reads a post by |
| CVE-2026-3341 | Analyzed | 未確認 | CWE-918 | IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests fr |
| CVE-2026-33543 | Deferred | 未確認 | CWE-288, CWE-306 | FOSSBilling is a free, open-source billing and client management system. Versions 0.7.2 and prior expose a guest API endpoint, /api/guest/staff/create, intended for initial adminis |
| CVE-2026-33553 | Awaiting Analysis | 未確認 | CWE-79 | Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS. |
| CVE-2026-33560 | Analyzed | 未確認 | CWE-434 | The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which allows authenticated users to upload files of any type withou |
| CVE-2026-33582 | Analyzed | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memo |
| CVE-2026-33612 | Deferred | 未確認 | CWE-349 | A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning. |
| CVE-2026-33646 | Deferred | 未確認 | CWE-94 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the ex |
| CVE-2026-33760 | Analyzed | 未確認 | CWE-639 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router exposes 7 endpoints that perform read, write, and d |
| CVE-2026-33828 | Analyzed | 未確認 | CWE-501 | Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34021 | Deferred | 未確認 | CWE-294 | The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic prot |
| CVE-2026-34022 | Deferred | 未確認 | CWE-321 | The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptographic keys to protec |
| CVE-2026-34023 | Deferred | 未確認 | CWE-863 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an incorrect authorization vulnerability in the WebSocket communication used by the SafeController W |
| CVE-2026-34024 | Deferred | 未確認 | CWE-862 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with m |
| CVE-2026-34025 | Deferred | 未確認 | CWE-290 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins b |
| CVE-2026-34026 | Deferred | 未確認 | CWE-23 | Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in the documentName parameter of the /safe/selfservice/openselfservicedoc |
| CVE-2026-34027 | Deferred | 未確認 | CWE-434 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocuments endpoint. |
| CVE-2026-34028 | Deferred | 未確認 | CWE-425 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attac |
| CVE-2026-34029 | Deferred | 未確認 | CWE-321 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-coded cryptographic key in the SafeSystem.Infrastructure.Security.dll component. An attacker |
| CVE-2026-34030 | Deferred | 未確認 | CWE-73 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the branch code when a new branch is created. The branch code is later used in |
| CVE-2026-34031 | Analyzed | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-sup |
| CVE-2026-34033 | Analyzed | 未確認 | CWE-79, CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied conte |
| CVE-2026-34077 | Analyzed | 未確認 | CWE-770 | React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross- |
| CVE-2026-34123 | Deferred | 未確認 | CWE-287 | On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensitivity operations. Due to a logic flaw in the device’s API au |
| CVE-2026-34180 | Analyzed | 未確認 | CWE-125 | Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix a |
| CVE-2026-34181 | Analyzed | 未確認 | CWE-354 | Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism |
| CVE-2026-34182 | Analyzed | 未確認 | CWE-354 | Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, lea |
| CVE-2026-34183 | Analyzed | 未確認 | CWE-1325 | Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote pe |
| CVE-2026-34192 | Deferred | 未確認 | CWE-416 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulnerability allows phys |
| CVE-2026-34193 | Analyzed | 未確認 | CWE-823 | Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic e |
| CVE-2026-34194 | Deferred | 未確認 | CWE-468 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation. Th |
| CVE-2026-34195 | Deferred | 未確認 | CWE-787 | Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly index |
| CVE-2026-3433 | Analyzed | 未確認 | CWE-200 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to restrict role_updated websocket event broadcasts to members of the affected |
| CVE-2026-34335 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-34355 | Modified | 未確認 | CWE-120, CWE-122 | A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fix |
| CVE-2026-34356 | Analyzed | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through |
| CVE-2026-34416 | Deferred | 未確認 | CWE-79 | OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious |
| CVE-2026-34417 | Deferred | 未確認 | CWE-79 | OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious |
| CVE-2026-34460 | Deferred | 未確認 | CWE-302, CWE-346, CWE-352 | NamelessMC is website software for Minecraft servers. In versions 2.2.4 and prior, the OAuth callback handling does not validate the state parameter server-side before exchanging t |
| CVE-2026-34592 | Deferred | 未確認 | CWE-639 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, Coolify server and project lookups are not scoped to th |
| CVE-2026-34594 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, an authenticated command injection vulnerability in the |
| CVE-2026-34597 | Deferred | 未確認 | CWE-78 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.470, a critical Authenticated Host Remote Code Execution (RC |
| CVE-2026-3462 | Deferred | 未確認 | CWE-862 | The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functions in all ve |
| CVE-2026-34657 | Analyzed | 未確認 | CWE-22 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerab |
| CVE-2026-34691 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to i |
| CVE-2026-34692 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-34693 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulne |
| CVE-2026-34694 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privilege |
| CVE-2026-34695 | Analyzed | 未確認 | CWE-121 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the c |
| CVE-2026-34696 | Analyzed | 未確認 | CWE-416 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-34697 | Analyzed | 未確認 | CWE-121 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the c |
| CVE-2026-34698 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-34699 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-34700 | Analyzed | 未確認 | CWE-787 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-34701 | Analyzed | 未確認 | CWE-122 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-34702 | Analyzed | 未確認 | CWE-121 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the c |
| CVE-2026-34703 | Analyzed | 未確認 | CWE-476 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could |
| CVE-2026-34704 | Analyzed | 未確認 | CWE-476 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could |
| CVE-2026-34705 | Analyzed | 未確認 | CWE-125 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage |
| CVE-2026-34706 | Analyzed | 未確認 | CWE-787 | InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl |
| CVE-2026-34707 | Analyzed | 未確認 | CWE-122 | InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user |
| CVE-2026-34708 | Analyzed | 未確認 | CWE-121 | InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-34709 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-34710 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-34711 | Analyzed | 未確認 | CWE-190 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerabil |
| CVE-2026-34712 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability t |
| CVE-2026-34713 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnera |
| CVE-2026-3472 | Analyzed | 未確認 | CWE-693 | Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to properly apply markdown image rendering restrictions to AI bot tool result posts, which allows a |
| CVE-2026-34886 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions. |
| CVE-2026-34888 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions. |
| CVE-2026-34891 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions. |
| CVE-2026-34892 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions. |
| CVE-2026-34893 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions. |
| CVE-2026-34894 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions. |
| CVE-2026-34895 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions. |
| CVE-2026-34898 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce <= 1.5.3 versions. |
| CVE-2026-3490 | Deferred | 未確認 | CWE-183 | picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Re |
| CVE-2026-34900 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions. |
| CVE-2026-34901 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions. |
| CVE-2026-34902 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 4.6.3 versions. |
| CVE-2026-34905 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did not |
| CVE-2026-34906 | Deferred | 未確認 | CWE-1336 | Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter r |
| CVE-2026-34907 | Deferred | 未確認 | CWE-79 | Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling of the locale parameter across multiple endpoints. An attacker can craft a malicio |
| CVE-2026-34912 | Deferred | 未確認 | CWE-284 | A missing access control check when linking banners or campaigns to a zone through the zone-include.php script of Revive Adserver 6.0.6 and earlier, or via its API allows a low‑pri |
| CVE-2026-34913 | Deferred | 未確認 | CWE-284 | A missing access control check when linking trackers to campaigns through the campaign-trackers.php script of Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to |
| CVE-2026-34914 | Deferred | 未確認 | CWE-89 | A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier. A low‑privileged user could exploit the clientid parameter to perform blin |
| CVE-2026-34915 | Deferred | 未確認 | CWE-79 | A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to exploit the clientid parameter to perf |
| CVE-2026-34916 | Deferred | 未確認 | CWE-94 | A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to use the logical parameter to inject ma |
| CVE-2026-34917 | Deferred | 未確認 | CWE-287 | Low‑privileged session IDs generated for the web admin console could be reused in the XML‑RPC API, whose authentication is normally restricted to admin users. An attacker could lev |
| CVE-2026-34993 | Modified | 未確認 | CWE-502 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may allow arbitrary code ex |
| CVE-2026-35018 | Deferred | 未確認 | CWE-78 | NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary c |
| CVE-2026-35019 | Deferred | 未確認 | CWE-321 | NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by e |
| CVE-2026-35025 | Analyzed | 未確認 | CWE-59 | ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths |
| CVE-2026-35049 | Awaiting Analysis | 未確認 | CWE-191, CWE-20 | wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload |
| CVE-2026-35058 | Analyzed | 未確認 | CWE-617 | Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fat |
| CVE-2026-35065 | Modified | 未確認 | CWE-306 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network acce |
| CVE-2026-35066 | Modified | 未確認 | CWE-284 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit thi |
| CVE-2026-35067 | Modified | 未確認 | CWE-284 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially e |
| CVE-2026-35068 | Modified | 未確認 | CWE-89 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privile |
| CVE-2026-35069 | Modified | 未確認 | CWE-89 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privile |
| CVE-2026-35075 | Analyzed | 未確認 | CWE-1393 | An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices. |
| CVE-2026-35076 | Analyzed | 未確認 | CWE-73 | The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. |
| CVE-2026-35077 | Analyzed | 未確認 | CWE-73 | The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. |
| CVE-2026-35078 | Analyzed | 未確認 | CWE-73 | The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. |
| CVE-2026-35079 | Analyzed | 未確認 | CWE-73 | The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. |
| CVE-2026-35080 | Analyzed | 未確認 | CWE-73 | The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. |
| CVE-2026-35081 | Analyzed | 未確認 | CWE-20 | The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input. |
| CVE-2026-35082 | Analyzed | 未確認 | CWE-22 | The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input. |
| CVE-2026-35083 | Analyzed | 未確認 | CWE-121 | A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root. |
| CVE-2026-35084 | Analyzed | 未確認 | CWE-121 | A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root. |
| CVE-2026-35085 | Analyzed | 未確認 | CWE-121 | A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root. |
| CVE-2026-35095 | Deferred | 未確認 | CWE-384 | KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful l |
| CVE-2026-35096 | Deferred | 未確認 | CWE-352 | KTM System e-BOK is vulnerable to Cross‑Site Request Forgery (CSRF) in both the email-change and password-change functionalities. An attacker can craft a malicious website that, wh |
| CVE-2026-35097 | Deferred | 未確認 | CWE-521 | KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters. This issue was fixed in t |
| CVE-2026-35098 | Deferred | 未確認 | CWE-307 | KTM System e-BOK does not implement any limit or timeout on consecutive login attempts, allowing an attacker to perform unlimited authentication requests. This lack of rate‑limitin |
| CVE-2026-3514 | Analyzed | 未確認 | CWE-863 | In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the |
| CVE-2026-35162 | Modified | 未確認 | CWE-284 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit thi |
| CVE-2026-35188 | Analyzed | 未確認 | CWE-415 | Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the client's cert |
| CVE-2026-35193 | Analyzed | 未確認 | CWE-524 | An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not add `Authorization` to the `Vary` respo |
| CVE-2026-35202 | Deferred | 未確認 | CWE-367, CWE-770 | Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits f |
| CVE-2026-35212 | Analyzed | 未確認 | CWE-79 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-me |
| CVE-2026-35258 | Analyzed | 未確認 | CWE-601 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploita |
| CVE-2026-35259 | Analyzed | 未確認 | CWE-601 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploita |
| CVE-2026-35261 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-35262 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Eas |
| CVE-2026-35263 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable |
| CVE-2026-35265 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploi |
| CVE-2026-35267 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-35268 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitabl |
| CVE-2026-35269 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-35270 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35271 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61 and 8.62. Difficult to |
| CVE-2026-35272 | Analyzed | 未確認 | CWE-269 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Ea |
| CVE-2026-35273 | Analyzed | 掲載 | CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8 |
| CVE-2026-35274 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Ea |
| CVE-2026-35275 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folders). The supported version that is affected is 7.2.8. Difficult to exploit vuln |
| CVE-2026-35276 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Application Server). Supported versions that are affected are 8.61 and 8.62. Di |
| CVE-2026-35278 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.61 and 8.62. E |
| CVE-2026-35279 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.61 and 8.62. D |
| CVE-2026-35280 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-35281 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-35282 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-35283 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-35284 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-35285 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-35286 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35288 | Analyzed | 未確認 | CWE-269 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Ea |
| CVE-2026-35289 | Analyzed | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package). Supported versions that are affected are 8.61 and 8.62. Di |
| CVE-2026-35291 | Analyzed | 未確認 | CWE-269 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Difficult to ex |
| CVE-2026-35292 | Analyzed | 未確認 | CWE-306 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploita |
| CVE-2026-35293 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploit |
| CVE-2026-35294 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connectors). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-35295 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35296 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35298 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1 |
| CVE-2026-35299 | Analyzed | 未確認 | CWE-306 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploita |
| CVE-2026-35300 | Analyzed | 未確認 | CWE-502 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1 |
| CVE-2026-35301 | Analyzed | 未確認 | CWE-306 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploita |
| CVE-2026-35302 | Analyzed | 未確認 | CWE-601 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Difficult to ex |
| CVE-2026-35303 | Analyzed | 未確認 | CWE-306 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploita |
| CVE-2026-35304 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-35305 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). The supported version that is affected is 15.1.1.0.0. Easily |
| CVE-2026-35306 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). The supported version that is affected is 15.1.1.0.0. Easily |
| CVE-2026-35307 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-35308 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0. |
| CVE-2026-35309 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0. |
| CVE-2026-35310 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-35311 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable |
| CVE-2026-35312 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-35313 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-35314 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Web Server Plugin). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-35315 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35316 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35317 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35318 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35319 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35320 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35321 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35322 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35323 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35324 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35325 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35326 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35327 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-35443 | Deferred | 未確認 | CWE-862 | NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/classes/ForumPostReactionContext.php` only verifies that the caller can view the forum, but i |
| CVE-2026-35447 | Deferred | 未確認 | CWE-201 | NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page (modules/Core/pages/profile.php) processes wall post submissions and replies before verifyi |
| CVE-2026-35482 | Analyzed | 未確認 | CWE-863 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, a sandbox escape vulnerability in the alf.io |
| CVE-2026-35505 | Deferred | 未確認 | CWE-401 | An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and th |
| CVE-2026-3553 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could hav |
| CVE-2026-35563 | Analyzed | 未確認 | CWE-297 | It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code vali |
| CVE-2026-35716 | Modified | 未確認 | CWE-121 | A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root |
| CVE-2026-35717 | Modified | 未確認 | CWE-121 | A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root |
| CVE-2026-35718 | Modified | 未確認 | CWE-22 | A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via |
| CVE-2026-35904 | Deferred | 未確認 | CWE-284 | Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the |
| CVE-2026-35905 | Deferred | 未確認 | CWE-259 | T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account. |
| CVE-2026-35906 | Deferred | 未確認 | CWE-78 | An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via sup |
| CVE-2026-3602 | Modified | 未確認 | CWE-73, CWE-89 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A r |
| CVE-2026-36174 | Deferred | 未確認 | CWE-256 | GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial console. This issue allows physically-proximate |
| CVE-2026-36175 | Deferred | 未確認 | CWE-20, CWE-288 | An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and inje |
| CVE-2026-36176 | Deferred | 未確認 | CWE-312 | GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extrac |
| CVE-2026-36178 | Deferred | 未確認 | CWE-212 | The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and |
| CVE-2026-36180 | Deferred | 未確認 | CWE-284 | A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify system files and binaries for the durat |
| CVE-2026-36182 | Deferred | 未確認 | CWE-328 | GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a brutef |
| CVE-2026-3620 | Deferred | 未確認 | CWE-20 | The Word Replacer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replacement' parameter in all versions up to, and including, 0.4. This is due to insuff |
| CVE-2026-36213 | Deferred | 未確認 | CWE-269 | An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component. |
| CVE-2026-36229 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. | |
| CVE-2026-3640 | Deferred | 未確認 | CWE-862 | The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin registers a REST API webhook endpo |
| CVE-2026-36418 | Deferred | 未確認 | CWE-94 | JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. The /jmreport/executeSelectApi endpoint passes user-sup |
| CVE-2026-36460 | Deferred | 未確認 | CWE-79 | Dovestones Softwares ADPhonebook before v4.0.1.1 is vulnerable to a Cross Site Scripting vulnerability. The /Admin/Save API allows an authenticated admin user to store malicious Ja |
| CVE-2026-36478 | Deferred | 未確認 | CWE-400 | An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a denial of service via the DnsServerApp.exe, DnsServerApp.dll, TechnitiumLibrary.Net/Dns/DnsC |
| CVE-2026-36499 | Awaiting Analysis | 未確認 | CWE-770 | A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or reva |
| CVE-2026-36500 | Deferred | 未確認 | CWE-22 | An issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers to execute a directory traversal via a crafted request. |
| CVE-2026-36501 | Deferred | 未確認 | CWE-20 | An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-3652 | Deferred | 未確認 | CWE-79 | The ARForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `value` parameter of the `arf_save_incomplete_form_data` AJAX action in all versions up to, an |
| CVE-2026-36521 | Deferred | 未確認 | CWE-79 | PublicCMS V5.202506.d has a Cross Site Scripting (XSS) vulnerability in the site configuration management module. |
| CVE-2026-36537 | Deferred | 未確認 | CWE-290 | ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The application improperly trusts user-supplied identity data within th |
| CVE-2026-36574 | Deferred | 未確認 | CWE-427 | A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL. |
| CVE-2026-36576 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted P |
| CVE-2026-36602 | Deferred | 未確認 | CWE-200 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action. An unauthenticated attacker on the adjacent networ |
| CVE-2026-36603 | Deferred | 未確認 | CWE-306 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAdd |
| CVE-2026-36604 | Deferred | 未確認 | CWE-350 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks. An external attacker can rebind a domain to |
| CVE-2026-36605 | Deferred | 未確認 | CWE-400 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing a persistent |
| CVE-2026-36606 | Deferred | 未確認 | CWE-798 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode. An attacker who obtains a back |
| CVE-2026-36607 | Deferred | 未確認 | CWE-307 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks the rate lim |
| CVE-2026-36608 | Deferred | 未確認 | CWE-441 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (19 |
| CVE-2026-36609 | Deferred | 未確認 | CWE-327, CWE-341 | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the |
| CVE-2026-36610 | Deferred | 未確認 | CWE-319, CWE-523 | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding. The firmware contains no TLS implementation, allo |
| CVE-2026-36611 | Deferred | 未確認 | CWE-200 | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposin |
| CVE-2026-36612 | Deferred | 未確認 | CWE-1188, CWE-307 | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 enables WPS 2.0 by default with a weak lockout policy (60-second lockout after 10 attempts). |
| CVE-2026-36613 | Deferred | 未確認 | CWE-125 | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined paths, exposing |
| CVE-2026-36615 | Deferred | 未確認 | CWE-200 | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 exposes an undocumented /agileconfigreset endpoint that returns internal buffer contents to unauthenticated attackers on th |
| CVE-2026-36616 | Deferred | 未確認 | CWE-1188, CWE-798 | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 contains hardcoded WiFi driver credentials including a RADIUS shared secret, WPS test key, and default PSK embedded in the |
| CVE-2026-36618 | Deferred | 未確認 | CWE-200 | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aiding targeted |
| CVE-2026-36670 | Deferred | 未確認 | CWE-89 | A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execu |
| CVE-2026-36719 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 pas |
| CVE-2026-36720 | Deferred | 未確認 | CWE-284 | Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type. |
| CVE-2026-36721 | Deferred | 未確認 | CWE-347 | A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token. |
| CVE-2026-36722 | Deferred | 未確認 | CWE-434 | An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute arbitrary code via uploading a crafted file |
| CVE-2026-36723 | Deferred | 未確認 | CWE-22 | An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows authenticated attackers to leverage directory traversal sequences to move arbitr |
| CVE-2026-36724 | Deferred | 未確認 | CWE-400 | An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denia |
| CVE-2026-36725 | Deferred | 未確認 | CWE-79 | A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via |
| CVE-2026-36726 | Deferred | 未確認 | CWE-22 | An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary files via supplying d |
| CVE-2026-36727 | Deferred | 未確認 | CWE-287 | An insecure authentication vulnerability in the /api/social-sign-in endpoint of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token. |
| CVE-2026-36728 | Deferred | 未確認 | CWE-79 | A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via inj |
| CVE-2026-36748 | Deferred | 未確認 | CWE-79 | RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile. |
| CVE-2026-36770 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda US_W3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the ask_to_reboot function. This vulnerability allow |
| CVE-2026-36771 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlSSIDset function. This |
| CVE-2026-36772 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlSSIDget function. This |
| CVE-2026-36773 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the Go parameter of the ask_to_reboot function. This vulner |
| CVE-2026-36777 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the param_1 parameter of the formSetCfm function. This vuln |
| CVE-2026-36778 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the username parameter of the R7WebsSecurityHandler functio |
| CVE-2026-36779 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain multiple stack overflows in the fromVirtualSer function via the puVar2, puVar1, |
| CVE-2026-36783 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain parameter of the fromNetToolGet function. This v |
| CVE-2026-36784 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the ip parameter of the fromNetToolGet function. This vulne |
| CVE-2026-36785 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the page parameter of the fromDhcpListClient function. This vulnerability allo |
| CVE-2026-36786 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability all |
| CVE-2026-36789 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password para |
| CVE-2026-36791 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda O3v3 v1.0.0.5 was discovered to contain a stack overflow in the save_list_data parameter of the formSetCfm function. This vulnerability all |
| CVE-2026-36792 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formWifiRadioSet function. Th |
| CVE-2026-36793 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the formwrlSSIDset function via the mit_ssid and mi |
| CVE-2026-36794 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username |
| CVE-2026-36796 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnera |
| CVE-2026-36797 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the IPMacBindRuleIp parameter of the formIPMacBindModify function. This vulnera |
| CVE-2026-36798 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple stack overflows in the formSetDebugCfgr function via the enable, level, and module paramet |
| CVE-2026-36799 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the portalAuth parameter of the formPortalAuth function. This vulnerability al |
| CVE-2026-36800 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindIndex parameter of the formIPMacBindDel function. This vulnerabil |
| CVE-2026-36801 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindRule parameter of the formIPMacBindAdd function. This vulnerabili |
| CVE-2026-36802 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the SafeMacFilter function. This vulnerability allows at |
| CVE-2026-36803 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the qossetting function. This vulnerability allows attac |
| CVE-2026-36805 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the Saveqqlist function via the qqStr and markStr parameters. These vu |
| CVE-2026-36806 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formModifyWebAuthUser function. This vu |
| CVE-2026-36807 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formAddWebAuthUser function. This vulne |
| CVE-2026-36808 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUser function. This vuln |
| CVE-2026-36809 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteID parameter of the formModifyWebAuthWhiteUser function. Th |
| CVE-2026-36810 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the gotoUrl parameter of the formPortalAuth function. This vulnerability al |
| CVE-2026-36811 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDelwebAuthPic function. This vulnerability |
| CVE-2026-36813 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vul |
| CVE-2026-36815 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the hostname parameter of the formSetNetCheckTools function. This vulnerabi |
| CVE-2026-36816 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function. T |
| CVE-2026-36817 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. |
| CVE-2026-36818 | Deferred | 未確認 | CWE-120 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function. Th |
| CVE-2026-36819 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMACAddr parameter of the fromSetDhcpRules function. This vulnerabili |
| CVE-2026-36820 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. |
| CVE-2026-36821 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vuln |
| CVE-2026-36822 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. This vulnerability al |
| CVE-2026-36823 | Deferred | 未確認 | CWE-121 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUser function. This vulne |
| CVE-2026-36848 | Analyzed | 未確認 | CWE-22 | Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem. |
| CVE-2026-36907 | Deferred | 未確認 | CWE-121 | A stack overflow in the AP4_StsdAtom::AP4_StsdAtom component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file. |
| CVE-2026-36908 | Deferred | 未確認 | CWE-121 | A stack overflow in the AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of Service (DoS) via a |
| CVE-2026-36933 | Deferred | 未確認 | CWE-284 | An issue in Boyleep K11, y108 firmware v.2.3.0.11291 allows a physically proximate attacker to execute arbitrary code via the factory test feature. |
| CVE-2026-37106 | Awaiting Analysis | 未確認 | CWE-640 | An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier be |
| CVE-2026-37149 | Deferred | 未確認 | CWE-89 | GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/search_products.php. |
| CVE-2026-37216 | Deferred | 未確認 | CWE-79 | Ruoyi 4.8.2 is vulnerable to Cross Site Scripting (XSS) at the interface /system/notice/add. |
| CVE-2026-3722 | Deferred | 未確認 | CWE-79 | The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attach |
| CVE-2026-37220 | Deferred | 未確認 | CWE-617 | FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent. The near-RT RIC assumes a mapping between SCTP association and E2 node always exists i |
| CVE-2026-37221 | Deferred | 未確認 | CWE-617 | FlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding pending event. The near-RT RIC uses assert() to enforce the exist |
| CVE-2026-37222 | Deferred | 未確認 | CWE-617 | FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages. A remote unauthenticated attacker can send a valid E2AP PDU containin |
| CVE-2026-37223 | Deferred | 未確認 | CWE-617 | FlexRIC v2.0.0 contains a reachable assertion in the iApp message dispatcher. The dispatcher validates incoming E2AP messages against a 9-entry whitelist using assert(). A remote u |
| CVE-2026-37224 | Deferred | 未確認 | CWE-617 | FlexRIC v2.0.0 crashes when receiving a duplicate E2_SETUP_REQUEST from the same or spoofed E2 Node. The iApp registry enforces node ID uniqueness via assert() rather than graceful |
| CVE-2026-37225 | Deferred | 未確認 | CWE-617 | FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST with an empty ricEventTriggerDefinition field. The E42 layer decoder accepts this as valid, but the E2 |
| CVE-2026-37226 | Analyzed | 未確認 | CWE-476 | FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in |
| CVE-2026-37227 | Deferred | 未確認 | CWE-617 | FlexRIC v2.0.0 contains reachable assert(0) calls in stub message handlers for whitelisted but unimplemented E2AP message types in the near-RT RIC. A remote unauthenticated attacke |
| CVE-2026-37228 | Analyzed | 未確認 | CWE-617 | FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer and enforces assert(rc < len) on th |
| CVE-2026-37229 | Analyzed | 未確認 | CWE-617 | FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote unauthenticated attacker can send any non-PER byte sequence (e. |
| CVE-2026-37230 | Analyzed | 未確認 | CWE-476 | FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup returns NULL, triggering assert() i |
| CVE-2026-37231 | Analyzed | 未確認 | CWE-191 | FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, the 16-bit counter wraps around and |
| CVE-2026-37232 | Analyzed | 未確認 | CWE-369 | An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The functions fill_RRU_PrbTotDl() and fill_RRU |
| CVE-2026-37233 | Analyzed | 未確認 | CWE-617 | FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0->xapp_i |
| CVE-2026-37234 | Analyzed | 未確認 | CWE-400 | FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs. On disconnect, only the first registered xapp_id's resources are cl |
| CVE-2026-37235 | Analyzed | 未確認 | CWE-284 | FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association. The validation function valid_xapp_id() only checks that the |
| CVE-2026-37452 | Deferred | 未確認 | CWE-200 | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSIAPService.exe component |
| CVE-2026-37453 | Analyzed | 未確認 | CWE-200 | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe |
| CVE-2026-37454 | Analyzed | 未確認 | CWE-200 | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the 3DES-ECB encryption |
| CVE-2026-37460 | Awaiting Analysis | 未確認 | CWE-20 | Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplyi |
| CVE-2026-37462 | Deferred | 未確認 | CWE-190 | An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE |
| CVE-2026-37637 | Deferred | 未確認 | CWE-94 | An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component |
| CVE-2026-37700 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page |
| CVE-2026-37737 | Deferred | 未確認 | CWE-346, CWE-625 | sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.match without end-anchoring. This allows a |
| CVE-2026-38060 | Deferred | 未確認 | CWE-78 | Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_unlock_sim via the pin parameter. |
| CVE-2026-38061 | Deferred | 未確認 | CWE-78 | Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_set_volume via the volume parameter. |
| CVE-2026-38062 | Deferred | 未確認 | CWE-78 | Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_set_rat_mode via the ratMode parameter. |
| CVE-2026-38063 | Deferred | 未確認 | CWE-78 | Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_radio_on_with_ia_apn via the ia parameter. |
| CVE-2026-38064 | Deferred | 未確認 | CWE-78 | Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_dial_call via the dialNumber parameter. |
| CVE-2026-38065 | Deferred | 未確認 | CWE-78 | Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_ims_on_with_apn via the ims_apn parameter. |
| CVE-2026-3820 | Awaiting Analysis | 未確認 | CWE-78 | There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters i |
| CVE-2026-38329 | Deferred | 未確認 | CWE-862 | Bludit CMS before version 3.18.4 allows Remote Code Execution (RCE) via the API Plugin. The POST /api/files/{key} endpoint in bl-plugins/api/plugin.php fails to perform authorizati |
| CVE-2026-3840 | Analyzed | 未確認 | CWE-22 | A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method in `kedro/io/core.py` |
| CVE-2026-38500 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. | |
| CVE-2026-38570 | Deferred | 未確認 | CWE-125 | bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service. |
| CVE-2026-38571 | Deferred | 未確認 | CWE-312 | Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr memory read/write commands, in the unauthenticated UART debug console of the Tenda N300 |
| CVE-2026-38579 | Deferred | 未確認 | CWE-79 | Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in damasac thaipalliative_lte through version 3.0 allow remote attackers to inject arbitrary web script or HTML via th |
| CVE-2026-38581 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0 allows remote attackers to execute arbitrary SQL commands via the idFormMain parameter to /substudy/ez |
| CVE-2026-38615 | Deferred | 未確認 | CWE-78 | DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php. |
| CVE-2026-38637 | Deferred | 未確認 | CWE-400 | An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-38639 | Deferred | 未確認 | CWE-20 | An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of Service (DoS) via parsing a crafted input. |
| CVE-2026-38640 | Deferred | 未確認 | CWE-400 | A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted string. |
| CVE-2026-38641 | Deferred | 未確認 | CWE-404 | An issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafted shared library. |
| CVE-2026-3870 | Deferred | 未確認 | CWE-120 | A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a |
| CVE-2026-3871 | Deferred | 未確認 | CWE-120 | A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger |
| CVE-2026-38714 | Analyzed | 未確認 | CWE-77 | InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python configuration fu |
| CVE-2026-38715 | Analyzed | 未確認 | CWE-77 | InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function. T |
| CVE-2026-38716 | Analyzed | 未確認 | CWE-77 | InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application expo |
| CVE-2026-38717 | Analyzed | 未確認 | CWE-77 | InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the file upload function. T |
| CVE-2026-38718 | Analyzed | 未確認 | CWE-120 | InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration funct |
| CVE-2026-38812 | Deferred | 未確認 | CWE-89 | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generation module and may allow an authenticated attacker with admini |
| CVE-2026-3894 | Modified | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 |
| CVE-2026-38950 | Deferred | 未確認 | CWE-502 | An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files. The affected components load model files from session direct |
| CVE-2026-38967 | Deferred | 未確認 | CWE-113 | CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values. |
| CVE-2026-38978 | Deferred | 未確認 | CWE-113 | transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths. |
| CVE-2026-39006 | Deferred | 未確認 | CWE-284, CWE-502, CWE-73 | An issue in SNMP4J-Agent 3.8.3 allows a remote attacker to execute arbitrary code via the snmp4jCfgStoragePath component. |
| CVE-2026-39007 | Deferred | 未確認 | CWE-200 | An issue in Observeinc's Observe v.2026-01-28 and before allows a remote attacker to obtain sensitive information via the CSV Log export component. |
| CVE-2026-39031 | Deferred | 未確認 | CWE-321 | Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongsi |
| CVE-2026-39107 | Deferred | 未確認 | CWE-79 | A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads gen |
| CVE-2026-39118 | Deferred | 未確認 | CWE-269 | An issue in Iru, Inc Kandji Agent before v.4.7.5(5374) allows a local attacker to escalate privileges via a client validation gap to invoke restricted agent functionality. |
| CVE-2026-39169 | Deferred | 未確認 | CWE-284 | SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php. |
| CVE-2026-39170 | Deferred | 未確認 | CWE-352 | SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms_user.php. |
| CVE-2026-39196 | Deferred | 未確認 | CWE-89 | Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the set_uri_query parameter in the KeyPartitioner::partition function. This vulnerability all |
| CVE-2026-39197 | Deferred | 未確認 | CWE-400 | An issue in the /util/http/prelude.rs endpoint of Datadog, Inc Vector v0.54.0 allows attackers to cause a Denial of Service (DoS) via a crafted request or payload. |
| CVE-2026-39199 | Deferred | 未確認 | CWE-787 | snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. |
| CVE-2026-39253 | Deferred | 未確認 | CWE-502 | An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components. |
| CVE-2026-39433 | Deferred | 未確認 | CWE-862 | Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions. |
| CVE-2026-39434 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions. |
| CVE-2026-39435 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in CformsII <= 15.1.3 versions. |
| CVE-2026-39437 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions. |
| CVE-2026-39438 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions. |
| CVE-2026-39441 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions. |
| CVE-2026-39442 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions. |
| CVE-2026-39443 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions. |
| CVE-2026-39445 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions. |
| CVE-2026-39446 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions. |
| CVE-2026-39447 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions. |
| CVE-2026-39449 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions. |
| CVE-2026-39450 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions. |
| CVE-2026-39451 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions. |
| CVE-2026-39463 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions. |
| CVE-2026-39465 | Deferred | 未確認 | CWE-94 | Editor Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 versions. |
| CVE-2026-39468 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions. |
| CVE-2026-39470 | Deferred | 未確認 | CWE-266 | Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions. |
| CVE-2026-39471 | Deferred | 未確認 | CWE-502 | Author PHP Object Injection in ShortPixel Image Optimizer <= 6.4.3 versions. |
| CVE-2026-39472 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions. |
| CVE-2026-39474 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions. |
| CVE-2026-39478 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23.87 versions. |
| CVE-2026-39480 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions. |
| CVE-2026-39481 | Deferred | 未確認 | CWE-502 | Author PHP Object Injection in Modula Image Gallery <= 2.14.18 versions. |
| CVE-2026-39489 | Deferred | 未確認 | CWE-22 | Author Arbitrary File Download in Download Monitor <= 5.1.9 versions. |
| CVE-2026-39490 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions. |
| CVE-2026-39491 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in JupiterX Core <= 4.14.1 versions. |
| CVE-2026-39492 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions. |
| CVE-2026-39493 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions. |
| CVE-2026-39494 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW allows Blind SQL Injection. This issue affe |
| CVE-2026-39498 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in YayMail <= 4.3.3 versions. |
| CVE-2026-39499 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.19 versions. |
| CVE-2026-39502 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions. |
| CVE-2026-39503 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Easy Digital Downloads <= 3.6.5 versions. |
| CVE-2026-39507 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Social Slider Feed <= 2.3.2 versions. |
| CVE-2026-39511 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions. |
| CVE-2026-39512 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions. |
| CVE-2026-39513 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Easy Appointments <= 3.12.21 versions. |
| CVE-2026-39514 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Paid Member Subscriptions <= 2.17.3 versions. |
| CVE-2026-39515 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Motors < 1.4.107 versions. |
| CVE-2026-39518 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions. |
| CVE-2026-39519 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions. |
| CVE-2026-39522 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Solene <= 3.4 versions. |
| CVE-2026-39523 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions. |
| CVE-2026-39524 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions. |
| CVE-2026-39525 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions. |
| CVE-2026-39527 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions. |
| CVE-2026-39529 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions. |
| CVE-2026-39530 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions. |
| CVE-2026-39532 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions. |
| CVE-2026-39533 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.4 versions. |
| CVE-2026-39534 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Directory Kit <= 1.5.0 versions. |
| CVE-2026-39537 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions. |
| CVE-2026-39539 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions. |
| CVE-2026-39540 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions. |
| CVE-2026-39545 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions. |
| CVE-2026-39546 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions. |
| CVE-2026-39547 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Getaway < 1.8 versions. |
| CVE-2026-39548 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions. |
| CVE-2026-39549 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions. |
| CVE-2026-39550 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6. |
| CVE-2026-39551 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1. |
| CVE-2026-39552 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Supply Co. Blueprint allows PHP Local File Inclusion. |
| CVE-2026-39553 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Local File Inclusion. Th |
| CVE-2026-39554 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions. |
| CVE-2026-39555 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1. |
| CVE-2026-39556 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Konsept <= 1.9 versions. |
| CVE-2026-39557 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions. |
| CVE-2026-39558 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Malmö <= 2.2 versions. |
| CVE-2026-39559 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Uppercase < 1.2.2 versions. |
| CVE-2026-39560 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions. |
| CVE-2026-39567 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions. |
| CVE-2026-39568 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions. |
| CVE-2026-39573 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions. |
| CVE-2026-39574 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions. |
| CVE-2026-39576 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions. |
| CVE-2026-39577 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions. |
| CVE-2026-39578 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Valiance <= 1.2 versions. |
| CVE-2026-39579 | Deferred | 未確認 | CWE-266 | Contributor Privilege Escalation in B Blocks <= 2.0.31 versions. |
| CVE-2026-39580 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions. |
| CVE-2026-39581 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions. |
| CVE-2026-39582 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions. |
| CVE-2026-39583 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. |
| CVE-2026-39584 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. |
| CVE-2026-39587 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions. |
| CVE-2026-39589 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. |
| CVE-2026-39590 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Atomlab <= 2.4.5 versions. |
| CVE-2026-39591 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions. |
| CVE-2026-39594 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. |
| CVE-2026-39595 | Deferred | 未確認 | CWE-862 | Author Broken Access Control in W3 Total Cache <= 2.9.1 versions. |
| CVE-2026-39596 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. |
| CVE-2026-39597 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions. |
| CVE-2026-39598 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/ |
| CVE-2026-39868 | Undergoing Analysis | 未確認 | CWE-20 | This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14. |
| CVE-2026-39872 | Modified | 未確認 | CWE-119, CWE-416 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS |
| CVE-2026-39893 | Analyzed | 未確認 | CWE-89 | Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request variable was concatenated into a RLIKE SQL clause without sani |
| CVE-2026-39894 | Analyzed | 未確認 | CWE-474 | Cacti is an open source performance and fault management framework. In versions 1.2.30 and below, the locale-dependent decimal formatting in rrdtool_function_update() can corrupt R |
| CVE-2026-39897 | Analyzed | 未確認 | CWE-79 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and below contain a Reflected XSS vulnerability in the html_auth_footer. This issue has been fix |
| CVE-2026-39899 | Analyzed | 未確認 | CWE-22 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal via filename parameter in package_import.php. This is |
| CVE-2026-39900 | Analyzed | 未確認 | CWE-79 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the auth_profile.php JavaScript c |
| CVE-2026-39904 | Deferred | 未確認 | CWE-770 | Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document |
| CVE-2026-39908 | Deferred | 未確認 | CWE-522 | OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuri |
| CVE-2026-39910 | Deferred | 未確認 | CWE-862 | STACKIT IaaS API contains a missing authorization check vulnerability that allows authenticated, low-privileged attackers to escalate privileges to full organization compromise by |
| CVE-2026-39926 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-39927 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-39938 | Analyzed | 未確認 | CWE-22, CWE-78 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool IPC serialization hardening. |
| CVE-2026-39948 | Analyzed | 未確認 | CWE-89 | Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request parameter is retrieved via the raw accessor grv() (rather than |
| CVE-2026-39951 | Analyzed | 未確認 | CWE-89 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph_name_regexp in the Reports fea |
| CVE-2026-39955 | Analyzed | 未確認 | CWE-89 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have pre-authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_v |
| CVE-2026-39998 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to spoof identity headers. This issue aff |
| CVE-2026-39999 | Analyzed | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in Apache APISIX. The attacker can completely bypass authentication capitalising on certain configurations of jwt-auth plugin. This |
| CVE-2026-40011 | Deferred | 未確認 | CWE-116 | An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the promethe |
| CVE-2026-40012 | Deferred | 未確認 | CWE-524 | ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled; |
| CVE-2026-40079 | Analyzed | 未確認 | CWE-78, CWE-88 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization in the escape_command( |
| CVE-2026-40080 | Analyzed | 未確認 | CWE-601 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a substring check rather than a host check at |
| CVE-2026-40082 | Analyzed | 未確認 | CWE-384 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after login, leading to Session Fixation. session |
| CVE-2026-40083 | Analyzed | 未確認 | CWE-89 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in managers.php. At line 7 |
| CVE-2026-40084 | Analyzed | 未確認 | CWE-22 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the Report format_file Parameter, causing ar |
| CVE-2026-40108 | Deferred | 未確認 | CWE-79 | GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, a technician can store an XSS payload in a ITIL costs. This issue has been fixed in vers |
| CVE-2026-40128 | Awaiting Analysis | 未確認 | CWE-35 | SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enablin |
| CVE-2026-40181 | Analyzed | 未確認 | CWE-601 | React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an exter |
| CVE-2026-40208 | Deferred | 未確認 | CWE-705 | An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. |
| CVE-2026-40209 | Deferred | 未確認 | CWE-772 | An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could |
| CVE-2026-40210 | Deferred | 未確認 | CWE-126 | An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash. |
| CVE-2026-40211 | Deferred | 未確認 | CWE-770 | An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC |
| CVE-2026-40215 | Analyzed | 未確認 | CWE-125, CWE-416 | A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free t |
| CVE-2026-4026 | Awaiting Analysis | 未確認 | CWE-284 | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings to escalate their pri |
| CVE-2026-4027 | Awaiting Analysis | 未確認 | CWE-284 | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control. |
| CVE-2026-40290 | Analyzed | 未確認 | CWE-416 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-40314 | Deferred | 未確認 | CWE-862 | NamelessMC is website software for Minecraft servers. In version 2.2.4,`core/classes/Misc/ProfilePostReactionContext.php` only verifies that the wall post exists and does not enfor |
| CVE-2026-4035 | Modified | 未確認 | CWE-201 | A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive s |
| CVE-2026-40371 | Analyzed | 未確認 | CWE-280, CWE-755 | Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-40376 | Analyzed | 未確認 | CWE-20 | Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-40404 | Analyzed | 未確認 | CWE-122, CWE-197 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-40409 | Analyzed | 未確認 | CWE-197 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| CVE-2026-40455 | Deferred | 未確認 | CWE-89 | An SQL Injection vulnerability exists in LMS (LAN Management System) before commit 4cb30a7 within the "tarifflist.php" module due to insufficient sanitization of the POST "tg[]" pa |
| CVE-2026-40456 | Deferred | 未確認 | CWE-78 | An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de due to an IP address parameter being passed to the "exec()" function without prope |
| CVE-2026-40457 | Deferred | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in LMS (LAN Management System) before commit 9c5651b in the "dbrecover.php" and "netremap.php" modules where unsanitized |
| CVE-2026-40495 | Deferred | 未確認 | CWE-200 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster parameters in HTML output, |
| CVE-2026-40519 | Deferred | 未確認 | CWE-78 | Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertb |
| CVE-2026-40521 | Deferred | 未確認 | CWE-22 | FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that allows authenticated attackers to execute arbitrary code by uploading fi |
| CVE-2026-40522 | Deferred | 未確認 | CWE-89, CWE-916 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report handler that allows authenticated attackers to extract arbitrary database data by |
| CVE-2026-40523 | Deferred | 未確認 | CWE-89 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SA_GLANALYTIC permission to execute |
| CVE-2026-40524 | Deferred | 未確認 | CWE-89 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transactions() function where the filter_type parameter is concatenated directly into a SQL IN() |
| CVE-2026-40543 | Deferred | 未確認 | CWE-862 | SOPlanning does not enforce authorization for backup functionalities. An unauthenticated attacker can directly query backup-related endpoints and retrieve backup archives containin |
| CVE-2026-40544 | Deferred | 未確認 | CWE-79 | SOPlanning is vulnerable to Stored Cross-Site Scripting (XSS) via /process/upload_backup endpoint. An authenticated attacker with access to the backup functionality can upload a cr |
| CVE-2026-40545 | Deferred | 未確認 | CWE-79 | SOPlanning is vulnerable to Reflected XSS via the taches parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary JavaScrip |
| CVE-2026-40546 | Deferred | 未確認 | CWE-89 | SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control |
| CVE-2026-40547 | Deferred | 未確認 | CWE-22 | SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading an |
| CVE-2026-40548 | Deferred | 未確認 | CWE-434 | SOPlanning does not verify uploaded file extension. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive containing a legitimate user. |
| CVE-2026-40549 | Deferred | 未確認 | CWE-352 | SOPlanning is vulnerable to Cross‑Site Request Forgery (CSRF) in groupe_save create, modify and delete endpoints. An attacker can craft a malicious website that, when visited by an |
| CVE-2026-40571 | Deferred | 未確認 | CWE-862 | NamelessMC is website software for Minecraft servers. In version 2.2.4, `core/classes/Misc/ProfilePostReactionContext.php` only verifies that the wall post exists and does not enfo |
| CVE-2026-4058 | Deferred | 未確認 | CWE-862 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due |
| CVE-2026-40605 | Deferred | 未確認 | CWE-22, CWE-73 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vulnerability in the cache deletion endpoint allows authent |
| CVE-2026-40619 | Awaiting Analysis | 未確認 | CWE-532 | A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to acc |
| CVE-2026-40624 | Awaiting Analysis | 未確認 | CWE-552 | Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated attacker to achieve arbitrary code execution via a specially c |
| CVE-2026-40639 | Awaiting Analysis | 未確認 | CWE-261 | Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leadin |
| CVE-2026-40641 | Modified | 未確認 | CWE-327 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access co |
| CVE-2026-40677 | Awaiting Analysis | 未確認 | The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution. | |
| CVE-2026-40702 | Deferred | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorize |
| CVE-2026-4071 | Deferred | 未確認 | CWE-352 | The BirdSeed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing nonce validation in the birdseed_p |
| CVE-2026-40711 | Awaiting Analysis | 未確認 | CWE-78 | Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Spe |
| CVE-2026-40713 | Analyzed | 未確認 | CWE-284 | Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploi |
| CVE-2026-40715 | Analyzed | 未確認 | CWE-284 | Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit thi |
| CVE-2026-40720 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions. |
| CVE-2026-40721 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions. |
| CVE-2026-40722 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Yoast SEO Premium: fr |
| CVE-2026-40723 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions. |
| CVE-2026-40724 | Deferred | 未確認 | CWE-22 | CP Client Arbitrary File Download in Client Portal (Pro) <= 5.6.2 versions. |
| CVE-2026-40725 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions. |
| CVE-2026-40726 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions. |
| CVE-2026-40727 | Deferred | 未確認 | CWE-22 | Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions. |
| CVE-2026-40731 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions. |
| CVE-2026-40732 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions. |
| CVE-2026-40733 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions. |
| CVE-2026-40735 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Reina <= 2.1 versions. |
| CVE-2026-40736 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions. |
| CVE-2026-40738 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions. |
| CVE-2026-40739 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions. |
| CVE-2026-40741 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions. |
| CVE-2026-40743 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions. |
| CVE-2026-40746 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. |
| CVE-2026-40747 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. |
| CVE-2026-40748 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. |
| CVE-2026-40749 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. |
| CVE-2026-40750 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: |
| CVE-2026-40751 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions. |
| CVE-2026-40752 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions. |
| CVE-2026-40753 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions. |
| CVE-2026-40754 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Roisin <= 1.4 versions. |
| CVE-2026-40755 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in TechLink <= 1.3 versions. |
| CVE-2026-40756 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Zoya <= 1.4 versions. |
| CVE-2026-40757 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Château <= 1.2.1 versions. |
| CVE-2026-40758 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions. |
| CVE-2026-40759 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Esmée <= 1.4 versions. |
| CVE-2026-40760 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Behold <= 1.5 versions. |
| CVE-2026-40761 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions. |
| CVE-2026-40762 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions. |
| CVE-2026-40765 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in collectchat <= 2.4.9 versions. |
| CVE-2026-40766 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions. |
| CVE-2026-40767 | Deferred | 未確認 | CWE-281 | Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions. |
| CVE-2026-40768 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions. |
| CVE-2026-40769 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field <= 1.0.6 versions. |
| CVE-2026-40770 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions. |
| CVE-2026-40771 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. |
| CVE-2026-40772 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions. |
| CVE-2026-40773 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions. |
| CVE-2026-40774 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions. |
| CVE-2026-40775 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions. |
| CVE-2026-40776 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions. |
| CVE-2026-40779 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions. |
| CVE-2026-40780 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a |
| CVE-2026-40781 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions. |
| CVE-2026-40782 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions. |
| CVE-2026-40783 | Deferred | 未確認 | CWE-94 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions. |
| CVE-2026-40785 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions. |
| CVE-2026-40787 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions. |
| CVE-2026-40788 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in ChatBot <= 7.9.7 versions. |
| CVE-2026-40789 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. |
| CVE-2026-40790 | Deferred | 未確認 | CWE-288 | Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions. |
| CVE-2026-40791 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions. |
| CVE-2026-40792 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions. |
| CVE-2026-40793 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Groundhogg < 4.4.1 versions. |
| CVE-2026-40794 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in myCred <= 3.0.3 versions. |
| CVE-2026-40795 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Amelia <= 2.2 versions. |
| CVE-2026-40796 | Deferred | 未確認 | CWE-497 | Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. |
| CVE-2026-40798 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions. |
| CVE-2026-40799 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions. |
| CVE-2026-4080 | Deferred | 未確認 | CWE-79 | The Easy Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_to_cart' shortcode in all versions up to and including 1.8. This is due to insufficient |
| CVE-2026-40809 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: from |
| CVE-2026-4081 | Deferred | 未確認 | CWE-79 | The ZeM STL plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [zemstl] shortcode in all versions up to and including 1.0. This is due to insufficient input |
| CVE-2026-40861 | Analyzed | 未確認 | CWE-59 | A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g. `/etc/pass |
| CVE-2026-40898 | Analyzed | 未確認 | CWE-770 | quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory allocation in quic-go's HTTP/3 client and server implementa |
| CVE-2026-40930 | Awaiting Analysis | 未確認 | CWE-436 | LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in th |
| CVE-2026-40941 | Analyzed | 未確認 | CWE-347 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation bypass allows which allows self-signed pack |
| CVE-2026-4096 | Analyzed | 未確認 | CWE-644 | IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct vari |
| CVE-2026-40961 | Analyzed | 未確認 | CWE-601 | A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the `is_safe_url` check, enabling redirection from a trusted Airflow dom |
| CVE-2026-40963 | Analyzed | 未確認 | CWE-285 | The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission on those linked Dags. |
| CVE-2026-40964 | Awaiting Analysis | 未確認 | CWE-287 | Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every |
| CVE-2026-40965 | Awaiting Analysis | 未確認 | CWE-200 | Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are inadve |
| CVE-2026-40983 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 throug |
| CVE-2026-40984 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 t |
| CVE-2026-40985 | Analyzed | 未確認 | CWE-917 | Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3. |
| CVE-2026-40986 | Analyzed | 未確認 | CWE-79 | Spring Web Flow's JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not "text/html", which can result in a scripting attack in the |
| CVE-2026-40987 | Analyzed | 未確認 | CWE-22 | A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content |
| CVE-2026-40988 | Analyzed | 未確認 | CWE-400 | An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded wr |
| CVE-2026-40989 | Analyzed | 未確認 | CWE-674 | Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 S |
| CVE-2026-40990 | Analyzed | 未確認 | CWE-770 | OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior |
| CVE-2026-40991 | Analyzed | 未確認 | CWE-611 | When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into doc |
| CVE-2026-40992 | Analyzed | 未確認 | CWE-295 | Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.chec |
| CVE-2026-40993 | Analyzed | 未確認 | CWE-502 | An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized |
| CVE-2026-40994 | Analyzed | 未確認 | CWE-1188 | Wss4jSecurityInterceptor initialized its BSP (WS-I Basic Security Profile) compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that v |
| CVE-2026-40995 | Analyzed | 未確認 | CWE-287 | X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped to UserDetails, without applying Spring Security's standard |
| CVE-2026-40996 | Analyzed | 未確認 | CWE-327 | Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. Inbound WS-Security decryption could |
| CVE-2026-40997 | Undergoing Analysis | 未確認 | CWE-209 | Several Spring WS integration paths with Spring Security could surface detailed account state (for example locked or disabled user semantics) to remote SOAP clients through excepti |
| CVE-2026-40998 | Analyzed | 未確認 | CWE-611 | Jaxp13XPathTemplate evaluated XPath expressions for StreamSource and SAXSource inputs using a code path that parsed attacker-controlled XML with the JDK's default DocumentBuilderFa |
| CVE-2026-40999 | Analyzed | 未確認 | CWE-918 | When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to dest |
| CVE-2026-41000 | Analyzed | 未確認 | CWE-294 | Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, protections against replay of Userna |
| CVE-2026-41001 | Analyzed | 未確認 | CWE-377 | Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local at |
| CVE-2026-41003 | Analyzed | 未確認 | CWE-79 | An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Se |
| CVE-2026-41005 | Awaiting Analysis | 未確認 | CWE-347 | Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from the Identity Provider (authenticity) in two S |
| CVE-2026-41006 | Analyzed | 未確認 | CWE-284 | Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media type deserializers, performs bean property binding via reflect |
| CVE-2026-41007 | Analyzed | 未確認 | CWE-770 | Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3.0 |
| CVE-2026-41008 | Analyzed | 未確認 | CWE-601 | Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request |
| CVE-2026-41010 | Awaiting Analysis | 未確認 | CWE-78 | ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value |
| CVE-2026-41011 | Awaiting Analysis | 未確認 | CWE-78 | PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes directly from release |
| CVE-2026-41013 | Awaiting Analysis | 未確認 | CWE-88 | Input validation bypass in SMB volume mount handling in CloudFoundry Foundation diego-release allows low-privileged CF space developer to inject arbitrary kernel CIFS mount options |
| CVE-2026-41014 | Analyzed | 未確認 | CWE-862 | The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with global Asset:read permis |
| CVE-2026-41017 | Modified | 未確認 | CWE-614 | Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy ( |
| CVE-2026-41031 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject |
| CVE-2026-41032 | Awaiting Analysis | 未確認 | CWE-200 | It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information. |
| CVE-2026-4104 | Deferred | 未確認 | CWE-89 | Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass allows SQL Injection. This issue a |
| CVE-2026-41045 | Analyzed | 未確認 | CWE-367 | A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root |
| CVE-2026-41046 | Analyzed | 未確認 | CWE-23 | A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denia |
| CVE-2026-41047 | Analyzed | 未確認 | CWE-306 | Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information. |
| CVE-2026-41048 | Analyzed | 未確認 | CWE-863 | Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if |
| CVE-2026-41049 | Analyzed | 未確認 | CWE-863 | Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged u |
| CVE-2026-41052 | Analyzed | 未確認 | CWE-305 | Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12. |
| CVE-2026-41053 | Analyzed | 未確認 | CWE-303 | Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting principal access to any logged in user, in 2.13 |
| CVE-2026-41065 | Deferred | 未確認 | CWE-1336 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable to remote code execution via the newsletter custom template d |
| CVE-2026-41084 | Analyzed | 未確認 | CWE-639 | A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against the `dag_id` resolved fr |
| CVE-2026-41092 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. |
| CVE-2026-41098 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-4110 | Deferred | 未確認 | The ultimate-woocommerce-auction-pro WordPress plugin through 2.4.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Sit | |
| CVE-2026-41108 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-41115 | Analyzed | 未確認 | CWE-285 | An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMER_GROUP_DESCRIBE (69) API validates the DESCRIBE operation on the GRO |
| CVE-2026-41116 | Awaiting Analysis | 未確認 | CWE-1386 | Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with l |
| CVE-2026-41120 | Analyzed | 未確認 | CWE-349 | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote |
| CVE-2026-41155 | Deferred | 未確認 | CWE-653 | An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an |
| CVE-2026-41156 | Deferred | 未確認 | CWE-416 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario. A shared |
| CVE-2026-41157 | Deferred | 未確認 | CWE-787 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corrup |
| CVE-2026-41158 | Deferred | 未確認 | CWE-416 | Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the def |
| CVE-2026-41178 | Analyzed | 未確認 | CWE-789 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid bagga |
| CVE-2026-41207 | Analyzed | 未確認 | CWE-330 | The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byte[] is filled with zeros and h |
| CVE-2026-41234 | Deferred | 未確認 | CWE-74 | Froxlor is open source server administration software. Prior to version 2.3.7, the `DomainZones.add` API endpoint does not sanitize newline characters in TXT record content. An aut |
| CVE-2026-41235 | Deferred | 未確認 | CWE-863 | Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_shells` as the approved shell list that customers may assign to |
| CVE-2026-41236 | Deferred | 未確認 | CWE-59 | Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users. T |
| CVE-2026-41237 | Deferred | 未確認 | CWE-74 | Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` which matches newlines (allowing embedded newlines to pass), TL |
| CVE-2026-41249 | Deferred | 未確認 | CWE-94 | CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow (`.github/workflows/static.yml`) uses the `pull_request_targ |
| CVE-2026-41280 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler vers |
| CVE-2026-41283 | Awaiting Analysis | 未確認 | CWE-749, CWE-863 | OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of se |
| CVE-2026-41412 | Deferred | 未確認 | CWE-22, CWE-73 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, the alf.io extension sandbox injects a fully- |
| CVE-2026-41448 | Deferred | 未確認 | CWE-22 | AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a pa |
| CVE-2026-41479 | Analyzed | 未確認 | CWE-601 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can be turned into an unauthenticat |
| CVE-2026-41518 | Deferred | 未確認 | CWE-79 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In versions 4.9.0 through 5.0.0, an authenticated use |
| CVE-2026-41522 | Deferred | 未確認 | CWE-285 | Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL en |
| CVE-2026-41523 | Modified | 未確認 | CWE-617, CWE-94 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in vLLM's activation function loading allows any unauthent |
| CVE-2026-41539 | Modified | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass sec |
| CVE-2026-41556 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. |
| CVE-2026-41557 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions. |
| CVE-2026-41566 | Deferred | 未確認 | CWE-280 | Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: 2.8.0. Users are recommended to upgrade to version |
| CVE-2026-41567 | Awaiting Analysis | 未確認 | CWE-427 | Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT / |
| CVE-2026-41568 | Analyzed | 未確認 | CWE-367, CWE-81 | Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a rac |
| CVE-2026-41569 | Analyzed | 未確認 | CWE-601 | authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check ra |
| CVE-2026-41577 | Analyzed | 未確認 | CWE-345 | authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, the SAML source response processor (ResponseProcessor.parse()) does not validate the Condit |
| CVE-2026-41581 | Deferred | 未確認 | CWE-89 | Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Injection via get_blog_list. This issue has been patched in versio |
| CVE-2026-41694 | Analyzed | 未確認 | CWE-347 | Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craf |
| CVE-2026-41695 | Analyzed | 未確認 | CWE-400 | Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext prop |
| CVE-2026-41696 | Analyzed | 未確認 | CWE-943 | Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a |
| CVE-2026-41697 | Analyzed | 未確認 | CWE-943 | Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). |
| CVE-2026-41699 | Analyzed | 未確認 | CWE-502 | Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead |
| CVE-2026-41700 | Analyzed | 未確認 | CWE-346 | Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visitin |
| CVE-2026-41701 | Analyzed | 未確認 | CWE-330 | Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 |
| CVE-2026-41706 | Analyzed | 未確認 | CWE-601 | Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intende |
| CVE-2026-41708 | Analyzed | 未確認 | CWE-400 | In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses |
| CVE-2026-41710 | Analyzed | 未確認 | CWE-770 | An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it per |
| CVE-2026-41711 | Analyzed | 未確認 | CWE-400 | Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: S |
| CVE-2026-41714 | Analyzed | 未確認 | CWE-295 | Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also calling setUseSSL(true) get TLS encryption with no certificat |
| CVE-2026-41715 | Awaiting Analysis | 未確認 | CWE-522 | In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP clie |
| CVE-2026-41716 | Analyzed | 未確認 | CWE-770 | Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. Affected |
| CVE-2026-41717 | Analyzed | 未確認 | CWE-917 | Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query |
| CVE-2026-41719 | Analyzed | 未確認 | CWE-917 | A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPr |
| CVE-2026-41720 | Awaiting Analysis | 未確認 | CWE-287 | Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password. Affected versions: |
| CVE-2026-41721 | Analyzed | 未確認 | CWE-400 | Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method usin |
| CVE-2026-41722 | Analyzed | 未確認 | CWE-79 | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be |
| CVE-2026-41723 | Analyzed | 未確認 | CWE-79 | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be |
| CVE-2026-41724 | Analyzed | 未確認 | CWE-79 | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be |
| CVE-2026-41726 | Analyzed | 未確認 | CWE-770 | When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending records with unique random spring.kafka.serialization.selecto |
| CVE-2026-41727 | Analyzed | 未確認 | CWE-20 | Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on them. A producer could send a record with a crafted retry_top |
| CVE-2026-41728 | Analyzed | 未確認 | CWE-284 | Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to intermediate path segments when resolving a multi-segment JSON |
| CVE-2026-41729 | Analyzed | 未確認 | CWE-917 | Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch (application/json-patch+json) requests. When a persistent entity |
| CVE-2026-41730 | Analyzed | 未確認 | CWE-209 | Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients. Affected versions: Sp |
| CVE-2026-41731 | Analyzed | 未確認 | CWE-502 | JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly t |
| CVE-2026-41732 | Analyzed | 未確認 | CWE-502 | JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally |
| CVE-2026-41837 | Analyzed | 未確認 | CWE-284 | Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and does not consider Jackson customizations before handing the |
| CVE-2026-41838 | Analyzed | 未確認 | CWE-330 | IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rul |
| CVE-2026-41839 | Analyzed | 未確認 | CWE-384 | A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for |
| CVE-2026-41840 | Analyzed | 未確認 | CWE-401 | Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 thr |
| CVE-2026-41841 | Analyzed | 未確認 | CWE-524 | Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2. |
| CVE-2026-41842 | Analyzed | 未確認 | CWE-400 | Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2 |
| CVE-2026-41843 | Analyzed | 未確認 | CWE-22 | Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 throug |
| CVE-2026-41844 | Analyzed | 未確認 | CWE-601 | A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly specified allows an attacker to craft a link resulting in a 30 |
| CVE-2026-41845 | Analyzed | 未確認 | CWE-79 | Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape() may lead to JavaScript code injection in the browser, potentially resulting in a cross-site scripting (XSS) |
| CVE-2026-41846 | Analyzed | 未確認 | CWE-79 | Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, po |
| CVE-2026-41847 | Analyzed | 未確認 | CWE-284 | Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48. |
| CVE-2026-41848 | Analyzed | 未確認 | CWE-1333 | Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to |
| CVE-2026-41849 | Analyzed | 未確認 | CWE-190 | An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expres |
| CVE-2026-41850 | Analyzed | 未確認 | CWE-407 | Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted ex |
| CVE-2026-41851 | Analyzed | 未確認 | CWE-770 | Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression t |
| CVE-2026-41852 | Analyzed | 未確認 | CWE-863 | A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may |
| CVE-2026-41853 | Analyzed | 未確認 | CWE-444 | Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 thr |
| CVE-2026-41854 | Analyzed | 未確認 | CWE-918 | Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forger |
| CVE-2026-41855 | Analyzed | 未確認 | CWE-502 | In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter |
| CVE-2026-41856 | Analyzed | 未確認 | CWE-284 | The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if su |
| CVE-2026-41858 | Awaiting Analysis | 未確認 | CWE-338 | Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time |
| CVE-2026-41859 | Awaiting Analysis | 未確認 | CWE-295 | A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that |
| CVE-2026-41860 | Awaiting Analysis | 未確認 | CWE-326 | CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_ |
| CVE-2026-41862 | Analyzed | 未確認 | CWE-502 | Spring Statemachine's Kryo-based persistence backends (JPA, MongoDB, Redis and ZooKeeper) deserialise persisted state-machine contexts without enforcing a class allowlist (CWE-502, |
| CVE-2026-41896 | Deferred | 未確認 | CWE-287 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the HMAC key is the application's manual_webhook_secret |
| CVE-2026-41918 | Deferred | 未確認 | CWE-525 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an |
| CVE-2026-41972 | Deferred | 未確認 | CWE-22 | Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41973 | Deferred | 未確認 | CWE-840 | Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41974 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41975 | Deferred | 未確認 | CWE-701 | Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
| CVE-2026-41976 | Deferred | 未確認 | CWE-275 | Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41977 | Deferred | 未確認 | CWE-190 | DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41978 | Deferred | 未確認 | CWE-275 | Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41979 | Deferred | 未確認 | CWE-701 | Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality. |
| CVE-2026-41980 | Deferred | 未確認 | CWE-200 | Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41981 | Deferred | 未確認 | CWE-122 | Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41982 | Deferred | 未確認 | CWE-416 | Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41983 | Deferred | 未確認 | CWE-399 | Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41984 | Deferred | 未確認 | CWE-284 | UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
| CVE-2026-41985 | Deferred | 未確認 | CWE-284 | UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
| CVE-2026-41986 | Deferred | 未確認 | CWE-606 | Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-41991 | Analyzed | 未確認 | CWE-377 | GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to |
| CVE-2026-41992 | Modified | 未確認 | CWE-126 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats with |
| CVE-2026-42004 | Deferred | 未確認 | CWE-115 | An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, c |
| CVE-2026-42005 | Deferred | 未確認 | CWE-400 | An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by defa |
| CVE-2026-42014 | Awaiting Analysis | 未確認 | CWE-825 | A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an |
| CVE-2026-42029 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-42055 | Modified | 未確認 | CWE-122, CWE-131, CWE-787 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 o |
| CVE-2026-42061 | Deferred | 未確認 | CWE-250 | Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93 |
| CVE-2026-42073 | Analyzed | 未確認 | CWE-352, CWE-400 | OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the OpenClaude MCP authentication flow starts a tempor |
| CVE-2026-42074 | Analyzed | 未確認 | CWE-284, CWE-306 | OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as |
| CVE-2026-42089 | Deferred | 未確認 | CWE-829 | Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing loc |
| CVE-2026-42127 | Modified | 未確認 | CWE-400, CWE-770 | The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitra |
| CVE-2026-42129 | Modified | 未確認 | CWE-22 | A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal |
| CVE-2026-42211 | Analyzed | 未確認 | CWE-502 | React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution ( |
| CVE-2026-42251 | Deferred | 未確認 | CWE-798 | Use of hard-coded credentials in KS-SOMED allowed an unauthorized attacker access to FTP server that hosted the application's update packages. The attacker with these credentials c |
| CVE-2026-42252 | Analyzed | 未確認 | CWE-1336 | Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashOperator(bash_command="echo value: {{ dag |
| CVE-2026-42253 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. The MessageServlet in the ActiveMQ web |
| CVE-2026-42305 | Deferred | 未確認 | CWE-22 | Dulwich is a pure-Python implementation of the Git file formats and protocols. Versions starting with 0.10.0 and prior to 1.2.5 have an arbitrary file write leading to remote code |
| CVE-2026-42306 | Analyzed | 未確認 | CWE-367, CWE-61 | Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a rac |
| CVE-2026-42317 | Deferred | 未確認 | CWE-862 | GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0.7, a technician can delete arbitrary files from the filesys |
| CVE-2026-42318 | Deferred | 未確認 | CWE-862 | GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete |
| CVE-2026-42320 | Deferred | 未確認 | CWE-862 | GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 10.0.25 and 11.0.7, a technician can read arbitrary files inside the GLPI_DO |
| CVE-2026-42321 | Deferred | 未確認 | CWE-116, CWE-79 | GLPI is a free asset and IT management software package. Starting in version 10.0.4 and prior to version 10.0.25, a technician can store an XSS payload in the asset locked tab. Upg |
| CVE-2026-42326 | Analyzed | 未確認 | CWE-125, CWE-191 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a maliciou |
| CVE-2026-42329 | Deferred | 未確認 | CWE-602 | Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can |
| CVE-2026-42342 | Analyzed | 未確認 | CWE-400 | React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can c |
| CVE-2026-42357 | Modified | 未確認 | CWE-863 | Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access. This issue affects Apache D |
| CVE-2026-42358 | Modified | 未確認 | CWE-200 | A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like `password`, `token`, `secret`, `api_key`) to be bypassed |
| CVE-2026-42359 | Analyzed | 未確認 | CWE-502 | A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under r |
| CVE-2026-42360 | Analyzed | 未確認 | CWE-200 | A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` / `token` / `secret` / `api_key` keys inside a JSON template |
| CVE-2026-42378 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions. |
| CVE-2026-42380 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions. |
| CVE-2026-42381 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions. |
| CVE-2026-42384 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions. |
| CVE-2026-42385 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions. |
| CVE-2026-42386 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions. |
| CVE-2026-42387 | Deferred | 未確認 | CWE-20 | A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation. |
| CVE-2026-42388 | Deferred | 未確認 | CWE-20 | Incomplete validation of the SOA record present in a catalog zone might lead to a crash. |
| CVE-2026-42389 | Deferred | 未確認 | CWE-20 | This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers. |
| CVE-2026-42390 | Deferred | 未確認 | CWE-20 | An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation. |
| CVE-2026-42411 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions. |
| CVE-2026-42450 | Deferred | 未確認 | CWE-120 | OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2, `FileFormatSpi3D.cpp:163` uses `sscanf` with `%s` into 64-byte stack buffers w |
| CVE-2026-42462 | Deferred | 未確認 | CWE-1289, CWE-180, CWE-347, CWE-436 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.9.11, 1.10.10, 2.0.18, 2.1.14, and 2.2.3, an attacker can make use of |
| CVE-2026-42487 | Deferred | 未確認 | CWE-362 | HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the li |
| CVE-2026-42488 | Deferred | 未確認 | CWE-119 | Some shadow paging errors paths will switch the page-tables without updating the currently running vCPU reference. This causes a mismatch between the loaded page-tables and the ma |
| CVE-2026-42489 | Deferred | 未確認 | CWE-667 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To create and manage guests, domctl operations are |
| CVE-2026-42490 | Deferred | 未確認 | CWE-667 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To create and manage guests, domctl operations are |
| CVE-2026-42504 | Awaiting Analysis | 未確認 | CWE-407 | Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. |
| CVE-2026-42507 | Awaiting Analysis | 未確認 | When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that | |
| CVE-2026-42530 | Modified | 未確認 | CWE-416 | NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along |
| CVE-2026-42535 | Analyzed | 未確認 | CWE-668 | A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child pro |
| CVE-2026-42536 | Modified | 未確認 | CWE-120, CWE-122 | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2. |
| CVE-2026-42538 | Deferred | 未確認 | CWE-434 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. |
| CVE-2026-42539 | Deferred | 未確認 | CWE-201 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which |
| CVE-2026-42540 | Deferred | 未確認 | CWE-915 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the data |
| CVE-2026-42542 | Analyzed | 未確認 | CWE-191 | TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the tao |
| CVE-2026-42543 | Deferred | 未確認 | CWE-650 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vulnerable to a cross-site request f |
| CVE-2026-42547 | Deferred | 未確認 | CWE-863 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customer |
| CVE-2026-42558 | Deferred | 未確認 | CWE-116, CWE-346, CWE-79 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.2, a vulnerability chain consisting of Stored |
| CVE-2026-42563 | Deferred | 未確認 | CWE-78 | Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, Dulwich's `ProcessMergeDriver` substitutes the |
| CVE-2026-42567 | Analyzed | 未確認 | CWE-1333 | Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in <svelte:e |
| CVE-2026-42568 | Deferred | 未確認 | CWE-90 | Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search fi |
| CVE-2026-42570 | Modified | 未確認 | CWE-770 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From version 5.6.3 to before version 5.8.1, devalue.par |
| CVE-2026-42573 | Modified | 未確認 | CWE-79 | Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to |
| CVE-2026-42588 | Analyzed | 未確認 | CWE-20, CWE-94 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ |
| CVE-2026-4259 | Deferred | 未確認 | CWE-79 | The ultimate-woocommerce-auction-pro WordPress plugin through 2.4.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Sit |
| CVE-2026-42599 | Analyzed | 未確認 | CWE-79 | Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in |
| CVE-2026-42604 | Deferred | 未確認 | CWE-863 | Actual is a local-first personal finance tool. The `POST /openid/config` endpoint in Actual Budget's sync-server versions <= 26.4.0 exposes the full OpenID Connect configuration—in |
| CVE-2026-42629 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions. |
| CVE-2026-42639 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. |
| CVE-2026-42640 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. |
| CVE-2026-42647 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue affects JoomSport: f |
| CVE-2026-42649 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. |
| CVE-2026-42650 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions. |
| CVE-2026-42651 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. |
| CVE-2026-42653 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.Mihai SliceWP allows Stored XSS. This issue affects SliceWP: from n/a th |
| CVE-2026-42654 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet |
| CVE-2026-42655 | Deferred | 未確認 | CWE-472 | Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. |
| CVE-2026-42656 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. |
| CVE-2026-42657 | Deferred | 未確認 | CWE-1284 | Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. |
| CVE-2026-42658 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. |
| CVE-2026-42659 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. |
| CVE-2026-42660 | Deferred | 未確認 | CWE-497 | Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. |
| CVE-2026-42661 | Deferred | 未確認 | CWE-35 | Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. |
| CVE-2026-42662 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions. |
| CVE-2026-42663 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. |
| CVE-2026-42664 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in AI Product Search for WooCommerce – Motive Commerce Search <= 1.38.2 versions. |
| CVE-2026-42665 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. |
| CVE-2026-42666 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions. |
| CVE-2026-42667 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions. |
| CVE-2026-42668 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions. |
| CVE-2026-42669 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0. |
| CVE-2026-42670 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels. Th |
| CVE-2026-42671 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a throug |
| CVE-2026-42672 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection. This issue affe |
| CVE-2026-42673 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retri |
| CVE-2026-42674 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding. This issue affects Advanced Access Manager: from n/a through 7.1.0. |
| CVE-2026-42675 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a t |
| CVE-2026-42676 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stored XSS. This issue affects myCred: from n/a through 3.0.4. |
| CVE-2026-42677 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Document Rev |
| CVE-2026-42678 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS. This issue affects GiveWP |
| CVE-2026-42679 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mamunur Rashid Classified Listing allows Path Traversal. This issue affects Classif |
| CVE-2026-42680 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation. This issue affects Contest Gallery Pro |
| CVE-2026-42681 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.Com e2pdf allows Reflected XSS. This issue affects e2pdf: from n/a thro |
| CVE-2026-42682 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects wpForo Forum: from n/a thr |
| CVE-2026-42683 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows DOM-Based XSS. This iss |
| CVE-2026-42684 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job Por |
| CVE-2026-42685 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS. This issue affects WP Job Portal: f |
| CVE-2026-42686 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions. |
| CVE-2026-42687 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions. |
| CVE-2026-42688 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions. |
| CVE-2026-42743 | Deferred | 未確認 | CWE-347 | Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. |
| CVE-2026-42752 | Deferred | 未確認 | CWE-440 | Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. |
| CVE-2026-42764 | Analyzed | 未確認 | CWE-476 | Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact sum |
| CVE-2026-42765 | Analyzed | 未確認 | CWE-476 | Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified cha |
| CVE-2026-42766 | Analyzed | 未確認 | CWE-476 | Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads |
| CVE-2026-42767 | Analyzed | 未確認 | CWE-476 | Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL poi |
| CVE-2026-42768 | Analyzed | 未確認 | CWE-514 | Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe |
| CVE-2026-42769 | Analyzed | 未確認 | CWE-295 | Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certific |
| CVE-2026-42770 | Modified | 未確認 | CWE-325 | Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious |
| CVE-2026-42771 | Analyzed | 未確認 | CWE-125 | Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out of bounds re |
| CVE-2026-42775 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions. |
| CVE-2026-42795 | Deferred | 未確認 | CWE-59 | Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection helpers (g |
| CVE-2026-42824 | Modified | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-42828 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42829 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-42835 | Analyzed | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose informat |
| CVE-2026-42836 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privi |
| CVE-2026-42837 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42839 | Deferred | 未確認 | CWE-79 | An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and trigger unescape |
| CVE-2026-42840 | Deferred | 未確認 | CWE-79 | An authenticated user can persist arbitrary HTML/JavaScript in the email_id or mobile_no fields of a Customer record and trigger unescaped rendering in the Point of Sale (POS) inte |
| CVE-2026-42846 | Deferred | 未確認 | CWE-78 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing an |
| CVE-2026-42849 | Analyzed | 未確認 | CWE-79 | authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make the |
| CVE-2026-42850 | Analyzed | 未確認 | CWE-77 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject commands within the subshell through kitty error. A special escape code will mak |
| CVE-2026-42851 | Analyzed | 未確認 | CWE-862, CWE-94 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, a program able to write bytes to a kitty terminal — a remote SSH peer, a downloaded file viewed with `cat |
| CVE-2026-42853 | Deferred | 未確認 | CWE-78 | ApostropheCMS is an open-source Node.js content management system. Versions of the @apostrophecms/cli package up to and including 3.6.0 contain a command injection vulnerability in |
| CVE-2026-42861 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpo |
| CVE-2026-42862 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the tool update endpoint |
| CVE-2026-42863 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the chatflow update endpo |
| CVE-2026-42867 | Analyzed | 未確認 | CWE-22 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (POST /api/v1/kno |
| CVE-2026-42890 | Deferred | 未確認 | CWE-94 | Actual is an open-source personal finance application. In the macOS desktop application version 25.x (built on Electron 39.2.7), the ELECTRON_RUN_AS_NODE fuse is not disabled, allo |
| CVE-2026-42895 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-42902 | Analyzed | 未確認 | CWE-285 | Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42903 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network. |
| CVE-2026-42904 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-42905 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42906 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally. |
| CVE-2026-42907 | Modified | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. |
| CVE-2026-42908 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-42909 | Modified | 未確認 | CWE-362, CWE-416, CWE-787 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-42910 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42911 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42912 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-42913 | Modified | 未確認 | CWE-362, CWE-416, CWE-787 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-42914 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
| CVE-2026-42915 | Modified | 未確認 | CWE-131 | Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally. |
| CVE-2026-42916 | Modified | 未確認 | CWE-190 | Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42932 | Deferred | 未確認 | CWE-340 | Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. Because the platform a |
| CVE-2026-42947 | Deferred | 未確認 | CWE-639 | A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently reassign a device to an arbitrary account. Because the affe |
| CVE-2026-42968 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally. |
| CVE-2026-42969 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. |
| CVE-2026-4297 | Deferred | 未確認 | CWE-862 | The Welcome Software Publishing plugin for WordPress is vulnerable to Arbitrary Options Update in all versions up to and including 0.0.31. This is due to a missing capability check |
| CVE-2026-42970 | Modified | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
| CVE-2026-42971 | Modified | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
| CVE-2026-42972 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally. |
| CVE-2026-42973 | Modified | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
| CVE-2026-42974 | Modified | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. |
| CVE-2026-42977 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-42978 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-42979 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-42980 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42981 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. |
| CVE-2026-42983 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42984 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42985 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-42986 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42987 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-42989 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42991 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-42992 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-42993 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-4328 | Deferred | 未確認 | CWE-918 | The Advanced Import plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This is due to the plugin using wp_remote_get() t |
| CVE-2026-4339 | Analyzed | 未確認 | CWE-918 | Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to validate attachment URLs against internal or private IP ranges in the Mattermost Agents plugin M |
| CVE-2026-4360 | Modified | 未確認 | CWE-281 | In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could en |
| CVE-2026-43623 | Deferred | 未確認 | CWE-121 | microtar through 0.1.0 contains a stack-based buffer overflow vulnerability in the raw_to_header() function in src/microtar.c that allows attackers to corrupt adjacent stack memory |
| CVE-2026-43624 | Deferred | 未確認 | CWE-22 | F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsa |
| CVE-2026-43625 | Deferred | 未確認 | CWE-319 | CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting improper redirect |
| CVE-2026-43663 | Modified | 未確認 | CWE-119, CWE-416 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS |
| CVE-2026-4367 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or |
| CVE-2026-43676 | Modified | 未確認 | CWE-125, CWE-787 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS |
| CVE-2026-43699 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43700 | Modified | 未確認 | CWE-346 | A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, m |
| CVE-2026-43701 | Modified | 未確認 | CWE-284 | The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, vis |
| CVE-2026-43703 | Modified | 未確認 | CWE-125, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6 |
| CVE-2026-43704 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26 |
| CVE-2026-43705 | Modified | 未確認 | CWE-843 | A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, t |
| CVE-2026-43706 | Modified | 未確認 | CWE-415 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. |
| CVE-2026-43707 | Modified | 未確認 | CWE-119 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 2 |
| CVE-2026-43708 | Modified | 未確認 | CWE-20 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS |
| CVE-2026-43709 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26 |
| CVE-2026-43712 | Modified | 未確認 | CWE-125, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26. |
| CVE-2026-43713 | Modified | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, wa |
| CVE-2026-43715 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5 |
| CVE-2026-43716 | Analyzed | 未確認 | CWE-119, CWE-416 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web co |
| CVE-2026-43717 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43718 | Modified | 未確認 | CWE-121 | A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, wat |
| CVE-2026-43720 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43721 | Modified | 未確認 | CWE-732 | This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchO |
| CVE-2026-43722 | Modified | 未確認 | CWE-20 | The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14 |
| CVE-2026-43724 | Modified | 未確認 | CWE-20 | The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14 |
| CVE-2026-43725 | Modified | 未確認 | CWE-20 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS |
| CVE-2026-43726 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43727 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43731 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43732 | Modified | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watc |
| CVE-2026-43734 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43735 | Modified | 未確認 | CWE-352 | The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, vis |
| CVE-2026-43740 | Modified | 未確認 | CWE-119, CWE-416 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26. |
| CVE-2026-43742 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43743 | Modified | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, macOS Tahoe 26.7, tv |
| CVE-2026-43745 | Modified | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS |
| CVE-2026-43746 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Taho |
| CVE-2026-43872 | Deferred | 未確認 | CWE-22 | Actual is an open-source personal finance application. Prior to version 26.5.0, several endpoints are affected by a path traversal vulnerability. Version 26.5.0 fixes the issue. |
| CVE-2026-43915 | Analyzed | 未確認 | CWE-79 | Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.11.0 contain a stored cross-site scripting (XSS) vulnerability in the web-admin HTTPS inter |
| CVE-2026-43920 | Deferred | 未確認 | CWE-306 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible withou |
| CVE-2026-43924 | Deferred | 未確認 | CWE-601 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Redirect module does not validate the URL scheme of administrator-configured de |
| CVE-2026-43926 | Deferred | 未確認 | CWE-204, CWE-307 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the password reset confirmation endpoint `/client/reset-password-confirm/:hash` is |
| CVE-2026-43951 | Analyzed | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4 |
| CVE-2026-43958 | Awaiting Analysis | 未確認 | CWE-121 | A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE r |
| CVE-2026-43965 | Deferred | 未確認 | CWE-22 | Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/ |
| CVE-2026-43966 | Modified | 未確認 | CWE-113 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes i |
| CVE-2026-43972 | Analyzed | 未確認 | CWE-346 | Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2 PUSH_PROMISE authority. In gun_http2:push_pro |
| CVE-2026-43973 | Analyzed | 未確認 | CWE-770 | Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In |
| CVE-2026-43974 | Analyzed | 未確認 | CWE-841 | Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited |
| CVE-2026-43984 | Deferred | 未確認 | CWE-79 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `log_js_errors` to any authenticated user, including guest users when |
| CVE-2026-43985 | Deferred | 未確認 | CWE-352 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUpdate` as a state-changing administrator endpoint, but the ro |
| CVE-2026-43986 | Deferred | 未確認 | CWE-918 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public `/image/<hash>` route that resolves attacker-controlled entr |
| CVE-2026-43994 | Analyzed | 未確認 | CWE-120 | Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.10.0 contain a stack buffer overflow in decode_oauth_token_gcm(). A uint16_t nonce_len fiel |
| CVE-2026-44016 | Modified | 未確認 | CWE-918, CWE-94 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend |
| CVE-2026-44017 | Modified | 未確認 | CWE-22 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functiona |
| CVE-2026-44018 | Analyzed | 未確認 | CWE-409, CWE-611, CWE-776 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML |
| CVE-2026-44020 | Modified | 未確認 | CWE-611, CWE-776 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the USPTO patent XML parser |
| CVE-2026-44022 | Analyzed | 未確認 | CWE-22 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling |
| CVE-2026-44046 | Analyzed | 未確認 | CWE-348 | Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of wolf-rbac plugin under default configuration to potentially pollute logs with spoofed ide |
| CVE-2026-44083 | Analyzed | 未確認 | CWE-639 | An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended pr |
| CVE-2026-44087 | Analyzed | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity vulnerability in Apache APISIX. The openid-connect plugin under default configuration has an attack surface that allows the attacker |
| CVE-2026-44089 | Deferred | 未確認 | CWE-121 | Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. This vulnerability could be exploited to cause the program to c |
| CVE-2026-44119 | Analyzed | 未確認 | CWE-269 | Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue |
| CVE-2026-44168 | Modified | 未確認 | CWE-78 | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, |
| CVE-2026-44169 | Analyzed | 未確認 | CWE-863 | MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored |
| CVE-2026-44170 | Modified | 未確認 | CWE-78 | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, |
| CVE-2026-44171 | Analyzed | 未確認 | CWE-22 | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, |
| CVE-2026-44172 | Modified | 未確認 | CWE-89 | MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_esc |
| CVE-2026-44173 | Modified | 未確認 | CWE-266, CWE-863 | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, |
| CVE-2026-44185 | Modified | 未確認 | CWE-125, CWE-126 | Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4 |
| CVE-2026-44186 | Analyzed | 未確認 | CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue a |
| CVE-2026-44188 | Awaiting Analysis | 未確認 | CWE-613 | A flaw was found in Ansible Lightspeed. This vulnerability, related to insufficient session expiration, allows a remote attacker to maintain persistent access to the Ansible Lights |
| CVE-2026-44205 | Deferred | 未確認 | CWE-79 | Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious sc |
| CVE-2026-44206 | Deferred | 未確認 | CWE-200 | Frappe is a full-stack web application framework. Prior to versions 15.107.2 and 16.17.4, DB Schema Enumeration is possible through exploiting an endpoint. This issue has been patc |
| CVE-2026-44207 | Deferred | 未確認 | CWE-639 | Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, an IDOR vulnerability allows authenticated users to access other users' email configuratio |
| CVE-2026-44208 | Deferred | 未確認 | CWE-284, CWE-285 | Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, lack of validations in the "submit_discussion()" endpoint allows for unauthorized access t |
| CVE-2026-44211 | Analyzed | 未確認 | CWE-1385, CWE-306 | Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban |
| CVE-2026-44249 | Modified | 未確認 | CWE-1287, CWE-284, CWE-697 | Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass |
| CVE-2026-44250 | Modified | 未確認 | CWE-400, CWE-770 | Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cau |
| CVE-2026-44271 | Analyzed | 未確認 | CWE-89 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low p |
| CVE-2026-44272 | Analyzed | 未確認 | CWE-89 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low p |
| CVE-2026-44273 | Analyzed | 未確認 | CWE-1392 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially exp |
| CVE-2026-44274 | Analyzed | 未確認 | CWE-59 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access coul |
| CVE-2026-44275 | Awaiting Analysis | 未確認 | CWE-59 | Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with l |
| CVE-2026-44281 | Deferred | 未確認 | CWE-862 | GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0.7, an authenticated user with config READ permission can re |
| CVE-2026-44311 | Analyzed | 未確認 | CWE-116, CWE-79 | Fabric.js is a Javascript HTML5 canvas library. Prior to 7.4.0, a potential Cross-Site Scripting (XSS) vulnerability exists in Fabric.js due to improper escaping of user-controlled |
| CVE-2026-44367 | Deferred | 未確認 | CWE-178, CWE-20 | Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to in |
| CVE-2026-44393 | Awaiting Analysis | 未確認 | CWE-295, CWE-297 | An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the messa |
| CVE-2026-44486 | Modified | 未確認 | CWE-200, CWE-201 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affecte |
| CVE-2026-44487 | Modified | 未確認 | CWE-201 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected |
| CVE-2026-44488 | Modified | 未確認 | CWE-770 | Axios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were |
| CVE-2026-44489 | Analyzed | 未確認 | CWE-113, CWE-1321 | Axios is a promise based HTTP client for the browser and Node.js. From 1.15.2 to before 1.16.0, nested objects created by utils.merge() (e.g., config.proxy) are still constructed a |
| CVE-2026-44490 | Analyzed | 未確認 | CWE-1321 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is poll |
| CVE-2026-44492 | Modified | 未確認 | CWE-289, CWE-918 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 addre |
| CVE-2026-44494 | Modified | 未確認 | CWE-1321, CWE-441, CWE-915 | Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows |
| CVE-2026-44495 | Modified | 未確認 | CWE-1321, CWE-915, CWE-94 | Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. |
| CVE-2026-44496 | Modified | 未確認 | CWE-1333, CWE-400 | Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the |
| CVE-2026-44505 | Deferred | 未確認 | CWE-755 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. network-libp2p handles kad get-record query progress in handle_dht_g |
| CVE-2026-44541 | Deferred | 未確認 | CWE-79 | Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description ove |
| CVE-2026-44545 | Analyzed | 未確認 | CWE-770 | daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory. Because Autobahn defaults both values to 0 (unlimited), an unaut |
| CVE-2026-44546 | Analyzed | 未確認 | CWE-444 | daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x |
| CVE-2026-44587 | Analyzed | 未確認 | CWE-184, CWE-625, CWE-79 | CarrierWave is a framework to upload files from Ruby applications. In versions prior to 2.2.7 and 3.1.3, the content_type_denylist check fails to escape regex metacharacters in str |
| CVE-2026-44609 | Deferred | 未確認 | CWE-427 | Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. |
| CVE-2026-44622 | Deferred | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-44628 | Deferred | 未確認 | CWE-843 | An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expected lockfile, and at |
| CVE-2026-44631 | Analyzed | 未確認 | CWE-124 | Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users |
| CVE-2026-44634 | Deferred | 未確認 | CWE-121, CWE-787 | SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in Simple |
| CVE-2026-44644 | Deferred | 未確認 | CWE-79 | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. Versions 10.25.7 and below are vulnerable to XSS through a flaw in the strip_html filter l |
| CVE-2026-44645 | Deferred | 未確認 | CWE-400 | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the renderLimit option can be fully bypassed by a {% for %} |
| CVE-2026-44646 | Deferred | 未確認 | CWE-693 | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, Context.spawn() creates a child Context for the {% render % |
| CVE-2026-44653 | Analyzed | 未確認 | CWE-201 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users with only `VIEW` access to an MCP server can retrieve the s |
| CVE-2026-44654 | Analyzed | 未確認 | CWE-863 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /ap |
| CVE-2026-44663 | Analyzed | 未確認 | CWE-190, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.11, an integer overflo |
| CVE-2026-44682 | Deferred | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. |
| CVE-2026-44688 | Analyzed | 未確認 | CWE-829 | In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context without distinguishing them from system inst |
| CVE-2026-44691 | Analyzed | 未確認 | CWE-829 | In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/tasks.json) could be executed without requiring workspace tru |
| CVE-2026-44692 | Deferred | 未確認 | CWE-639 | Sharp is a content management framework built for Laravel as a package. Prior to version 9.22.0, Sharp exposes a generic download endpoint that authorizes access only to the suppli |
| CVE-2026-44693 | Deferred | 未確認 | CWE-362 | Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HT |
| CVE-2026-44696 | Deferred | 未確認 | CWE-79 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's rich text (markdown) rendering pipeline uses Sanitize::Config::RELAXED[:css] for i |
| CVE-2026-44705 | Analyzed | 未確認 | CWE-22 | tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary d |
| CVE-2026-44716 | Analyzed | 未確認 | CWE-22 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From version 0.0.90 to before version 1.2.0, a path traversal vulnerab |
| CVE-2026-44726 | Analyzed | 未確認 | CWE-319 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. From 2.0.0 until 2.7.8, a flaw in Deno's Node.js tls compatibility layer could cause a TLS client to transmit application |
| CVE-2026-44727 | Modified | 未確認 | CWE-1021, CWE-79 | Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin |
| CVE-2026-44731 | Deferred | 未確認 | CWE-639 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the web application's meetings filter feature leaks whether a given user ID correspon |
| CVE-2026-44732 | Deferred | 未確認 | CWE-639 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, OpenProject exposes a document update endpoint used to modify existing documents. The |
| CVE-2026-44733 | Deferred | 未確認 | CWE-620 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits |
| CVE-2026-44734 | Deferred | 未確認 | CWE-862 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, a Missing Authorization vulnerability exists in OpenProject's CostReportsController. |
| CVE-2026-44735 | Deferred | 未確認 | CWE-863 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share details for ALL work packages in a proj |
| CVE-2026-44736 | Deferred | 未確認 | CWE-200, CWE-639, CWE-836 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GET /api/v3/relations endpoint allows any authenticated user to retrieve relations — and the |
| CVE-2026-44740 | Deferred | 未確認 | CWE-674, CWE-835 | Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in p |
| CVE-2026-44743 | Awaiting Analysis | 未確認 | CWE-497 | Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the con |
| CVE-2026-44744 | Awaiting Analysis | 未確認 | CWE-89 | SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execu |
| CVE-2026-44746 | Awaiting Analysis | 未確認 | CWE-79 | Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver JAVA (JDBC Test Servlet), an unauthenticated attacker could craft a URL that embeds a malicious script. |
| CVE-2026-44748 | Awaiting Analysis | 未確認 | CWE-347 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML docume |
| CVE-2026-44750 | Awaiting Analysis | 未確認 | CWE-862 | SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. This could allow a low-privileged user to perform actions tha |
| CVE-2026-44751 | Awaiting Analysis | 未確認 | CWE-862 | Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite |
| CVE-2026-44754 | Awaiting Analysis | 未確認 | CWE-862 | The Remote Function Call (RFC) modules of the Operational Data Provisioning Data Replication API (ODP-RFC) are missing caller identification of permitted SAP-internal applications |
| CVE-2026-44755 | Awaiting Analysis | 未確認 | CWE-346 | SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by authenticated users, resulting in an email spoofing vulnerab |
| CVE-2026-44757 | Awaiting Analysis | 未確認 | CWE-79 | SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script |
| CVE-2026-44779 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, bot d |
| CVE-2026-44780 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, Revie |
| CVE-2026-44782 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, Group |
| CVE-2026-44783 | Analyzed | 未確認 | CWE-284 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, a fla |
| CVE-2026-44784 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, group |
| CVE-2026-44785 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, the A |
| CVE-2026-44786 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, chat |
| CVE-2026-44789 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global |
| CVE-2026-44790 | Analyzed | 未確認 | CWE-88 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could inject CLI flag |
| CVE-2026-44791 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patc |
| CVE-2026-44792 | Analyzed | 未確認 | CWE-89 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control co |
| CVE-2026-44799 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-44801 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-44802 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-44803 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
| CVE-2026-44804 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-44805 | Analyzed | 未確認 | CWE-416, CWE-822 | Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally. |
| CVE-2026-44807 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-44808 | Modified | 未確認 | CWE-122, CWE-125, CWE-416 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-44809 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-44810 | Analyzed | 未確認 | CWE-287 | Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-44811 | Modified | 未確認 | CWE-122, CWE-20, CWE-416 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-44812 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
| CVE-2026-44813 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-44814 | Analyzed | 未確認 | CWE-122, CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
| CVE-2026-44815 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-44817 | Modified | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-44818 | Modified | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-44819 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-44820 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-44821 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-44822 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-44823 | Modified | 未確認 | CWE-197, CWE-416 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-44824 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-44825 | Analyzed | 未確認 | CWE-1188, CWE-798 | Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full ad |
| CVE-2026-44889 | Analyzed | 未確認 | CWE-601 | WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb jo |
| CVE-2026-44890 | Modified | 未確認 | CWE-400, CWE-770 | Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cau |
| CVE-2026-44892 | Analyzed | 未確認 | CWE-1188, CWE-400 | Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, the default configuration of the `Http3ConnectionHandler` i |
| CVE-2026-44893 | Modified | 未確認 | CWE-703, CWE-805 | Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and 4.2.15.Final, when decoding a P |
| CVE-2026-44894 | Modified | 未確認 | CWE-346, CWE-940 | Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the application does not set one. Prior t |
| CVE-2026-44911 | Analyzed | 未確認 | CWE-863 | Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration proper |
| CVE-2026-44913 | Analyzed | 未確認 | CWE-116 | Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1.2.0 through 2.9.0 allows for injecting SQL commands using crafted naming. |
| CVE-2026-44914 | Analyzed | 未確認 | CWE-862 | Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that include extension components with specific Required Permissions based on the Restricte |
| CVE-2026-44915 | Analyzed | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The default configuration of cas-auth in Apache APISIX is vulnerable to phishing and credential |
| CVE-2026-44917 | Analyzed | 未確認 | CWE-669 | OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template. |
| CVE-2026-44932 | Awaiting Analysis | 未確認 | CWE-78 | Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on th |
| CVE-2026-44939 | Awaiting Analysis | 未確認 | CWE-95 | A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow |
| CVE-2026-44942 | Awaiting Analysis | 未確認 | CWE-24 | A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill dire |
| CVE-2026-44946 | Analyzed | 未確認 | CWE-294 | A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in th |
| CVE-2026-44947 | Awaiting Analysis | 未確認 | CWE-281 | A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthoriz |
| CVE-2026-44948 | Analyzed | 未確認 | CWE-23 | A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 cou |
| CVE-2026-44949 | Undergoing Analysis | 未確認 | CWE-306 | A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10 |
| CVE-2026-44956 | Deferred | 未確認 | CWE-79 | Low‑privileged users could use their Full Name as a vector for a stored XSS attack. The name is included in system‑generated emails, whose content is stored in the details field of |
| CVE-2026-44957 | Deferred | 未確認 | CWE-284 | A missing access control check when invoking various modify methods in the XML‑RPC API of Revive Adserver 6.0.6 and earlier. The API allowed entities to be reassigned to different |
| CVE-2026-44958 | Deferred | 未確認 | CWE-284 | An access control bypass allows an advertiser‑level user to activate or deactivate a banner in Revive Adserver 6.0.6 and earlier, even when such permissions were not granted. The b |
| CVE-2026-44959 | Deferred | 未確認 | CWE-94 | A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged user could add an unexpected component parameter a |
| CVE-2026-44960 | Deferred | 未確認 | CWE-79 | A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details for affected entries, any malicious JavaScript payloa |
| CVE-2026-44961 | Deferred | 未確認 | CWE-287 | The XML‑RPC API addUser method has a validation bypass introduced in the fix for CVE‑2025‑55129. As a result, API users could create usernames that enabled impersonation or stored |
| CVE-2026-44963 | Awaiting Analysis | 未確認 | CWE-502 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. |
| CVE-2026-44967 | Analyzed | 未確認 | CWE-789 | OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. Prior to release 1.27.0, the OTLP HTTP exporters (traces/metrics/logs) read the full HTTP response into an in-memory v |
| CVE-2026-44975 | Deferred | 未確認 | CWE-862 | Frappe is a full-stack web application framework. Prior to versions 15.107.2 and 16.17.4, any authenticated user can reset onboarding for all users in the system. This issue has be |
| CVE-2026-44976 | Deferred | 未確認 | CWE-284 | Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.1 |
| CVE-2026-44990 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of |
| CVE-2026-45011 | Deferred | 未確認 | CWE-116, CWE-79 | ApostropheCMS is an open-source Node.js content management system. Version 4.29.0 has a stored cross-site scripting vulnerability in the image widget functionality. A user with the |
| CVE-2026-45012 | Deferred | 未確認 | CWE-918 | ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 contain an authenticated server-side request forgery (SSRF) in the rich-text |
| CVE-2026-45013 | Deferred | 未確認 | CWE-20, CWE-640 | ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 have a password reset flow that constructs the reset URL using `req.hostname` |
| CVE-2026-45014 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 are vulnerable to stored cross-site scripting via unsanitized user display na |
| CVE-2026-45031 | Modified | 未確認 | CWE-400, CWE-770 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder i |
| CVE-2026-45034 | Deferred | 未確認 | CWE-502 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.5, CVE-2026-34084 was patched by the helper File::prohibitWrappers. The helper calls p |
| CVE-2026-45060 | Deferred | 未確認 | CWE-89 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the actions/progress_video.php endpoint is vulnerable to blind SQL injection. Any unauthentic |
| CVE-2026-45062 | Deferred | 未確認 | CWE-176, CWE-178, CWE-20 | FrankenPHP is a modern application server for PHP. From version 1.11.2 to before version 1.12.3, the splitPos() function in cgi.go misuses golang.org/x/text/search with search.Igno |
| CVE-2026-45080 | Deferred | 未確認 | CWE-200, CWE-284 | Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access control allows disclosure of password hash. This issue has bee |
| CVE-2026-45085 | Analyzed | 未確認 | CWE-200, CWE-862 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, four |
| CVE-2026-45106 | Deferred | 未確認 | CWE-79 | Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping. Any contributor whose con |
| CVE-2026-45131 | Deferred | 未確認 | CWE-94 | CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from f |
| CVE-2026-45132 | Deferred | 未確認 | CWE-94 | CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Person |
| CVE-2026-45135 | Analyzed | 未確認 | CWE-176, CWE-178, CWE-20 | Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCGI transport's splitPos() in modules/caddyhttp/reverseproxy/fastcgi/fastcgi.go mi |
| CVE-2026-45153 | Deferred | 未確認 | CWE-287 | Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to by |
| CVE-2026-45154 | Deferred | 未確認 | CWE-284 | Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared v |
| CVE-2026-45155 | Deferred | 未確認 | CWE-639 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.7 and 33.0.0 to before 33.0.1, a missing access check on API lev |
| CVE-2026-45156 | Deferred | 未確認 | CWE-287 | Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0, and 6.0.0 to before 6.4.0, a missing signature verification |
| CVE-2026-45157 | Deferred | 未確認 | CWE-284 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a malicious user has access |
| CVE-2026-45159 | Deferred | 未確認 | CWE-639 | Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a |
| CVE-2026-45160 | Analyzed | 未確認 | CWE-125 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read flaw exists in the DHCP server opt |
| CVE-2026-45169 | Analyzed | 未確認 | CWE-400 | Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and co |
| CVE-2026-45170 | Modified | 未確認 | CWE-295 | Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. Cybe |
| CVE-2026-45171 | Analyzed | 未確認 | CWE-22 | Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an auth |
| CVE-2026-45172 | Analyzed | 未確認 | CWE-78 | Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user co |
| CVE-2026-45173 | Analyzed | 未確認 | CWE-346 | Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. I |
| CVE-2026-45174 | Analyzed | 未確認 | CWE-404 | Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA |
| CVE-2026-45175 | Analyzed | 未確認 | CWE-295 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass |
| CVE-2026-45176 | Analyzed | 未確認 | CWE-269 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploi |
| CVE-2026-45177 | Analyzed | 未確認 | CWE-284 | Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploi |
| CVE-2026-45178 | Analyzed | 未確認 | CWE-284 | Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard |
| CVE-2026-45188 | Deferred | 未確認 | CWE-23 | Relative Path Traversal vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which f |
| CVE-2026-45192 | Analyzed | 未確認 | CWE-200 | A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets |
| CVE-2026-45195 | Analyzed | 未確認 | CWE-280 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for th |
| CVE-2026-4522 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1. |
| CVE-2026-45233 | Deferred | 未確認 | CWE-22 | HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequ |
| CVE-2026-45256 | Analyzed | 未確認 | CWE-269 | When used to deliver a signal to a specific thread, thr_kill2(2) called p_cansignal() to determine whether the operation was permitted but did not check the result before deliverin |
| CVE-2026-45257 | Analyzed | 未確認 | CWE-123 | The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. This assumption does not hold for data place |
| CVE-2026-45258 | Analyzed | 未確認 | CWE-125, CWE-190, CWE-681, CWE-787 | dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a large |
| CVE-2026-45259 | Analyzed | 未確認 | CWE-266 | sigqueue(2) was marked as permitted in capability mode with the introduction of Capsicum in 2011, but the implementation of kern_sigqueue did not include a capability mode check re |
| CVE-2026-4526 | Analyzed | 未確認 | CWE-125 | In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a |
| CVE-2026-45264 | Deferred | 未確認 | CWE-284 | Nextcloud is an open source content collaboration platform. From versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11, an |
| CVE-2026-45266 | Deferred | 未確認 | CWE-284 | Nextcloud is an open source content collaboration platform. Prior to versions 21.1.10, 22.0.11, and 23.0.3, a low-privileged user can force other user's microphones to be muted in |
| CVE-2026-45267 | Deferred | 未確認 | CWE-200, CWE-862 | Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed users to request reading form submissions of other users. Th |
| CVE-2026-45275 | Analyzed | 未確認 | CWE-285 | Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without shari |
| CVE-2026-45277 | Analyzed | 未確認 | CWE-200 | Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows |
| CVE-2026-45278 | Analyzed | 未確認 | CWE-601 | Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, wh |
| CVE-2026-45279 | Analyzed | 未確認 | CWE-22 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14, and 32.0.0 to before 32.0.4, if {lang} is used in the templa |
| CVE-2026-45281 | Analyzed | 未確認 | CWE-639 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, with the knowledge of other user |
| CVE-2026-45282 | Analyzed | 未確認 | CWE-284 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can ac |
| CVE-2026-45283 | Analyzed | 未確認 | CWE-287 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, and 33.0.0 to before 33.0.1, the files_lock app did not prope |
| CVE-2026-45284 | Analyzed | 未確認 | CWE-284 | Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where provided by LDAP to still authent |
| CVE-2026-45285 | Analyzed | 未確認 | CWE-862 | Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud |
| CVE-2026-45286 | Analyzed | 未確認 | CWE-200 | Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6.2.3, an authenticated user can enumerate users on the same |
| CVE-2026-45287 | Analyzed | 未確認 | CWE-772, CWE-775 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1.0` and `go.opentelemetry.io/otel/schema/v1.1` leaks one fil |
| CVE-2026-45289 | Deferred | 未確認 | CWE-287 | CloudburstMC Protocol is a protocol library for Minecraft Bedrock Edition. Prior to version 3.0.0.Beta12-20260420.182526-15, CloudburstMC Protocol is partially missing validation f |
| CVE-2026-45290 | Deferred | 未確認 | CWE-770 | Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.0.0.CR3-20260417.085727-30` impacts publicly accessible soft |
| CVE-2026-45291 | Deferred | 未確認 | CWE-20 | Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.0.0.CR3-20260418.124334-32` impacts publicly accessible soft |
| CVE-2026-45300 | Analyzed | 未確認 | CWE-200 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Versions on the 2.x branch prior to 2.15.0 and |
| CVE-2026-45302 | Deferred | 未確認 | CWE-1321 | parse-nested-form-data is a tiny node module for parsing FormData by name into objects and arrays. Prior to version 1.0.1, parseFormData() walks bracket and dot-notation FormData f |
| CVE-2026-45327 | Deferred | 未確認 | CWE-306 | TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Versi |
| CVE-2026-45328 | Analyzed | 未確認 | CWE-20, CWE-787 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrappers in esp_secure_services.c a |
| CVE-2026-45329 | Analyzed | 未確認 | CWE-125, CWE-20, CWE-200 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_secure_services.c and esp_secure_ |
| CVE-2026-45357 | Deferred | 未確認 | CWE-400 | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width spec |
| CVE-2026-45358 | Analyzed | 未確認 | CWE-125, CWE-193 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could res |
| CVE-2026-45359 | Modified | 未確認 | CWE-125, CWE-129 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top va |
| CVE-2026-45360 | Analyzed | 未確認 | CWE-502 | Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_reference`) imported and dispatched arbitrary class paths drawn from DAG-author-c |
| CVE-2026-45380 | Deferred | 未確認 | CWE-193, CWE-22 | bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, a one-byte off-by-one error in SafeOutPathBuilder::re |
| CVE-2026-45384 | Deferred | 未確認 | CWE-377, CWE-59 | bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, there is an arbitrary file overwrite vulnerability vi |
| CVE-2026-45388 | Deferred | 未確認 | CWE-295 | In OCaml-TLS before 2.1.0, the client implementation does insufficient checks of the certificate provided by the server, which allows impersonation with certificates that are not m |
| CVE-2026-45389 | Deferred | 未確認 | CWE-295 | In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonati |
| CVE-2026-45390 | Deferred | 未確認 | CWE-22 | In OCaml-tar before 3.4.0, a crafted archive with ../ path segments in its name allows escaping the current working directory. This is not desired behavior, and tar(1) rejects such |
| CVE-2026-45405 | Analyzed | 未確認 | CWE-59 | Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:from-archive and certs:add commands extract user-supplied tar/zip archives into temporary directories without sanitizing me |
| CVE-2026-45406 | Analyzed | 未確認 | CWE-95 | Dokku is a docker-powered PaaS. Prior to 0.38.2, the openresty-vhosts plugin copies files from an app's openresty/http-includes/ git repository directory to the host and then inter |
| CVE-2026-45407 | Analyzed | 未確認 | CWE-522 | Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash's touch command, which applies the default umask of 0644. This pre-creat |
| CVE-2026-45408 | Analyzed | 未確認 | CWE-78 | Dokku is a docker-powered PaaS. Prior to 0.38.2, the app name validation regex (^[a-z0-9][^/:_A-Z]*$) permits shell metacharacters. When an authenticated user pushes to a git remot |
| CVE-2026-45409 | Analyzed | 未確認 | CWE-1333 | Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processin |
| CVE-2026-45416 | Modified | 未確認 | CWE-770 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the |
| CVE-2026-45418 | Deferred | 未確認 | CWE-89 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #132, any authenticated user who can upload videos can add multiple subtitles from different files |
| CVE-2026-45426 | Analyzed | 未確認 | CWE-863 | Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag. Apache Airflow's Log server authorized |
| CVE-2026-45431 | Deferred | 未確認 | CWE-78 | This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated |
| CVE-2026-45432 | Deferred | 未確認 | CWE-319 | This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit |
| CVE-2026-45433 | Deferred | 未確認 | CWE-321 | This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerabilit |
| CVE-2026-45436 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions. |
| CVE-2026-45437 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions. |
| CVE-2026-45439 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions. |
| CVE-2026-45441 | Deferred | 未確認 | CWE-1284 | Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions. |
| CVE-2026-45445 | Analyzed | 未確認 | CWE-325 | Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently dis |
| CVE-2026-45446 | Analyzed | 未確認 | CWE-325 | Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext all |
| CVE-2026-45447 | Modified | 未確認 | CWE-416, CWE-825 | Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result |
| CVE-2026-45453 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-45454 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-45455 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45456 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45457 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-45458 | Modified | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45459 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-45460 | Modified | 未確認 | CWE-126 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45461 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45462 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-45463 | Modified | 未確認 | CWE-121, CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45464 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-45465 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-45466 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45467 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-45468 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-45469 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-45471 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-45472 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45474 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45475 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45476 | Analyzed | 未確認 | CWE-416 | Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45479 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-45480 | Analyzed | 未確認 | CWE-287 | Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-45481 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-45482 | Modified | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature |
| CVE-2026-45483 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a net |
| CVE-2026-45484 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-45485 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45486 | Modified | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-45487 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45490 | Modified | 未確認 | CWE-266, CWE-285, CWE-863 | Improper authorization in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45491 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. |
| CVE-2026-45497 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network. |
| CVE-2026-45500 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network |
| CVE-2026-45501 | Modified | 未確認 | CWE-79, CWE-918 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-45502 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-45503 | Modified | 未確認 | CWE-285, CWE-918 | Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-45504 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-45505 | Analyzed | 未確認 | CWE-20, CWE-94 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesi |
| CVE-2026-45536 | Analyzed | 未確認 | CWE-200, CWE-772 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, netty_unix_socket_recvFd sets msg_contro |
| CVE-2026-45541 | Analyzed | 未確認 | CWE-476 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference exists in the WebSocket subprot |
| CVE-2026-45542 | Analyzed | 未確認 | CWE-122 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exists in the Security Scheme 2 (SR |
| CVE-2026-45543 | Analyzed | 未確認 | CWE-552 | Nextcloud is an open source content collaboration platform. From version 4.3.0 to before version 5.2.7, a removed collaborator retains unauthorized read access to uploaded responde |
| CVE-2026-45544 | Analyzed | 未確認 | CWE-1230 | Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in N |
| CVE-2026-45545 | Analyzed | 未確認 | CWE-89 | Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1.0.0 to before 1.0.4, an authen |
| CVE-2026-45549 | Deferred | 未確認 | CWE-862, CWE-863 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, agent_action (app/routes/smon/agent_routes.py:166-179) has dec |
| CVE-2026-45550 | Deferred | 未確認 | CWE-639, CWE-862, CWE-863 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, PUT /smon/check (app/routes/smon/routes.py:117-138) gates only |
| CVE-2026-45552 | Deferred | 未確認 | CWE-639, CWE-862, CWE-863 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before_request → @jwt_r |
| CVE-2026-45553 | Deferred | 未確認 | CWE-200 | NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils without disabling file insertion directiv |
| CVE-2026-45554 | Deferred | 未確認 | CWE-248, CWE-770 | NiceGUI is a Python-based UI framework. Prior to version 3.12.0, two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may resolve t |
| CVE-2026-45556 | Deferred | 未確認 | CWE-20, CWE-22, CWE-73, CWE-78 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /waf/<service>/<server_ip>/rule/<rule_id>/save accepts a |
| CVE-2026-45558 | Deferred | 未確認 | CWE-20, CWE-77, CWE-78, CWE-94 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the HAProxy section-save endpoints (POST /api/service/haproxy/ |
| CVE-2026-45559 | Deferred | 未確認 | CWE-90 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, get_ldap_email (app/modules/roxywi/user.py:120-157) builds the |
| CVE-2026-45560 | Deferred | 未確認 | CWE-79 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, wrap_line (app/modules/common/common.py:181-186) and highlight |
| CVE-2026-45561 | Deferred | 未確認 | CWE-918 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the /smon/agent/{version,uptime,status,checks}/<server_ip> fam |
| CVE-2026-45563 | Deferred | 未確認 | CWE-639, CWE-863 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, GET /history/<service>/<server_ip> re-uses the server_ip path |
| CVE-2026-45564 | Deferred | 未確認 | CWE-78 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /config/versions/<service>/<server_ip>/<configver>/save i |
| CVE-2026-45565 | Deferred | 未確認 | CWE-117, CWE-20, CWE-22 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, EscapedString (app/modules/roxywi/class_models.py:16-30) is th |
| CVE-2026-45566 | Deferred | 未確認 | CWE-601 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the login flow allow-lists next URLs by rejecting strings cont |
| CVE-2026-45567 | Deferred | 未確認 | CWE-287, CWE-306, CWE-697 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, there is an authentication bypass vulnerability via 'api' subs |
| CVE-2026-45569 | Deferred | 未確認 | CWE-22, CWE-697 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, ommit d4d10006 ("Expand validation to block .. in config_file_ |
| CVE-2026-45581 | Deferred | 未確認 | CWE-532 | fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chaincode |
| CVE-2026-45583 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-45586 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45588 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-45591 | Modified | 未確認 | CWE-400, CWE-770 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-45592 | Analyzed | 未確認 | CWE-190, CWE-416 | Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45593 | Analyzed | 未確認 | CWE-190, CWE-416 | Use after free in Windows SDK allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45594 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-45595 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-45596 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45597 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privi |
| CVE-2026-45598 | Modified | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat |
| CVE-2026-45599 | Analyzed | 未確認 | CWE-416 | Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-45600 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45601 | Modified | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat |
| CVE-2026-45602 | Modified | 未確認 | CWE-229, CWE-349 | No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-45603 | Modified | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat |
| CVE-2026-45604 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-45605 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45606 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally. |
| CVE-2026-45607 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
| CVE-2026-45608 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45614 | Analyzed | 未確認 | CWE-347 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4 |
| CVE-2026-45617 | Deferred | 未確認 | CWE-1333 | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the built-in strip_html filter uses a regex containing four |
| CVE-2026-45624 | Analyzed | 未確認 | CWE-125, CWE-129 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion an |
| CVE-2026-45634 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. |
| CVE-2026-45635 | Modified | 未確認 | CWE-416, CWE-843 | Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-45636 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-45637 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45638 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45639 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-45640 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45641 | Modified | 未確認 | CWE-125, CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
| CVE-2026-45642 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack. |
| CVE-2026-45643 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-45644 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a n |
| CVE-2026-45645 | Modified | 未確認 | CWE-787, CWE-822 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-45647 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45648 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
| CVE-2026-45649 | Analyzed | 未確認 | CWE-284 | Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally. |
| CVE-2026-45650 | Analyzed | 未確認 | CWE-451 | User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-45653 | Modified | 未確認 | CWE-122, CWE-416 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45654 | Modified | 未確認 | CWE-284 | Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-45655 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
| CVE-2026-45656 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-45657 | Analyzed | 未確認 | CWE-122, CWE-416 | Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-45658 | Modified | 未確認 | CWE-284 | Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-45664 | Modified | 未確認 | CWE-400, CWE-407, CWE-674, CWE-770 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder |
| CVE-2026-45669 | Analyzed | 未確認 | CWE-83 | Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6, navigateTo() with external: true generates a se |
| CVE-2026-45670 | Analyzed | 未確認 | CWE-749 | Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder versions 3.15.4 to before 3.21.6, and 4.0.0-alpha.1 to before 4.4.6, |
| CVE-2026-45673 | Analyzed | 未確認 | CWE-330, CWE-340 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DNS resolver uses a predictable |
| CVE-2026-45674 | Modified | 未確認 | CWE-345, CWE-346 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to valid |
| CVE-2026-45676 | Analyzed | 未確認 | CWE-20, CWE-248 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI's replacement ELF parser trusts section offsets, c |
| CVE-2026-45677 | Deferred | 未確認 | CWE-862 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's SAML integr |
| CVE-2026-45678 | Analyzed | 未確認 | CWE-20, CWE-754 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payl |
| CVE-2026-45679 | Analyzed | 未確認 | CWE-117, CWE-532 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis error text as the span status me |
| CVE-2026-45680 | Analyzed | 未確認 | CWE-400, CWE-834 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI replays BPF probe hits into histogram observations |
| CVE-2026-45681 | Analyzed | 未確認 | CWE-125, CWE-130 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the per-CPU message-buffer fallback path uses a 256-by |
| CVE-2026-45682 | Analyzed | 未確認 | CWE-401, CWE-770 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcurrentHashMap introduced for Java |
| CVE-2026-45683 | Analyzed | 未確認 | CWE-127, CWE-200 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Java TLS ioctl probe reads user-controlled ioctl p |
| CVE-2026-45684 | Analyzed | 未確認 | CWE-126, CWE-787 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI's log enricher mishandles writ |
| CVE-2026-45685 | Analyzed | 未確認 | CWE-20, CWE-248, CWE-704 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages ca |
| CVE-2026-45686 | Analyzed | 未確認 | CWE-190 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a remotely reachable integer overf |
| CVE-2026-45687 | Deferred | 未確認 | CWE-915 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's sendFileMes |
| CVE-2026-45688 | Deferred | 未確認 | CWE-943 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's CAS login h |
| CVE-2026-45689 | Deferred | 未確認 | CWE-943 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, an unauthenticated networ |
| CVE-2026-45690 | Analyzed | 未確認 | CWE-287 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authentication bypass vulnera |
| CVE-2026-45691 | Analyzed | 未確認 | CWE-287 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a pre-2FA session cookie (create |
| CVE-2026-45692 | Modified | 未確認 | CWE-187, CWE-863 | Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, the authorization layer and the /config traversal layer do not agree on what object the pa |
| CVE-2026-45696 | Modified | 未確認 | CWE-122, CWE-125 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.11, the HTJ2K (High-Th |
| CVE-2026-45701 | Deferred | 未確認 | CWE-327 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak |
| CVE-2026-45702 | Analyzed | 未確認 | CWE-843 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in versio |
| CVE-2026-45722 | Analyzed | 未確認 | CWE-89 | Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in the Tables app allowed a user |
| CVE-2026-45727 | Deferred | 未確認 | CWE-22 | CloakBrowser is a tool to bypass bot detection tests. Prior to version 0.3.28, the cloakserve CDP multiplexer uses the user-supplied fingerprint query parameter directly as a files |
| CVE-2026-45729 | Deferred | 未確認 | CWE-476 | Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes unt |
| CVE-2026-45732 | Analyzed | 未確認 | CWE-639 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints authorized access using credential:r |
| CVE-2026-45739 | Analyzed | 未確認 | CWE-200, CWE-201 | Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled GraphiQL template wrote values from the GraphiQL headers editor |
| CVE-2026-45743 | Modified | 未確認 | CWE-639 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not veri |
| CVE-2026-45744 | Modified | 未確認 | CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endp |
| CVE-2026-45745 | Analyzed | 未確認 | CWE-295 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop (Electron) disables TLS cert |
| CVE-2026-45746 | Modified | 未確認 | CWE-284, CWE-639 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix conta |
| CVE-2026-45748 | Modified | 未確認 | CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoint in Termix prior to version 2.3 |
| CVE-2026-45749 | Analyzed | 未確認 | CWE-308 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /users/totp/disable` and `POST /users/totp/backup-codes` end |
| CVE-2026-45750 | Modified | 未確認 | CWE-639, CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endp |
| CVE-2026-45757 | Deferred | 未確認 | CWE-613 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12, Rocket.Chat allows users |
| CVE-2026-45758 | Analyzed | 未確認 | CWE-506 | Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` |
| CVE-2026-45771 | Analyzed | 未確認 | CWE-776 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-45775 | Analyzed | 未確認 | CWE-22 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, a pat |
| CVE-2026-45776 | Analyzed | 未確認 | CWE-284 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted |
| CVE-2026-45777 | Analyzed | 未確認 | CWE-78 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system co |
| CVE-2026-45778 | Analyzed | 未確認 | CWE-79 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attacker can inject malicious JavaScript into their Open XDMoD us |
| CVE-2026-45779 | Analyzed | 未確認 | CWE-89 | OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated |
| CVE-2026-45782 | Deferred | 未確認 | CWE-416 | Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. From version 21.0 to before version 51.2, a guest can cause a use-after-free in the cloud-hypervisor process by s |
| CVE-2026-45783 | Deferred | 未確認 | CWE-20, CWE-400 | libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated remote peer can exhaust the disk storage of any @libp2p/kad-dht node r |
| CVE-2026-45792 | Analyzed | 未確認 | CWE-345, CWE-426 | rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.32.0, RTK (Rust Token Killer) improperly trusts project-local configuration files. RTK aut |
| CVE-2026-45802 | Deferred | 未確認 | CWE-400, CWE-770 | FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. Prior to version 2.6.7, an attacker can upload a |
| CVE-2026-45807 | Analyzed | 未確認 | CWE-22 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, several Kestra API endpoints accept a kestra:// URI from the client and pass it through S |
| CVE-2026-45810 | Analyzed | 未確認 | CWE-639 | Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation a |
| CVE-2026-45822 | Deferred | 未確認 | CWE-400, CWE-407 | decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-l |
| CVE-2026-45830 | Modified | 未確認 | CWE-266, CWE-639 | A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in an |
| CVE-2026-45831 | Analyzed | 未確認 | CWE-863 | The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never che |
| CVE-2026-45832 | Modified | 未確認 | CWE-551, CWE-639 | All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls |
| CVE-2026-45833 | Modified | 未確認 | CWE-94 | A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious |
| CVE-2026-4610 | Deferred | 未確認 | CWE-79 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pm_author_message' parameter in the pm_send_messa |
| CVE-2026-46243 | Modified | 未確認 | CWE-20, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing |
| CVE-2026-46244 | Modified | 未確認 | CWE-682, CWE-823 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packet |
| CVE-2026-46245 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dc_link NULL handling in HPD init amdgpu_dm_hpd_init() may see connectors without a valid |
| CVE-2026-46246 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler Using the `devm_` variant for requesti |
| CVE-2026-46247 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gfx3d: add parent to parent request map After commit d228ece36345 ("clk: divider: remove round_rate | |
| CVE-2026-46248 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: clear stale link mapping of ahvif->links_map When an arvif is initialized in non-AP STA mode but | |
| CVE-2026-46249 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cy | |
| CVE-2026-46250 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, __current_thread_info is defin | |
| CVE-2026-46251 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dirty_list corruption When the incompat flag EXTENT_TREE_V2 is set, we uncondition | |
| CVE-2026-46252 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in regulator_resolve_supply() error path If late enabling of a supply regulator f |
| CVE-2026-46253 | Modified | 未確認 | CWE-122, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ram_save_old() persistent_ram_save_old() can be called multiple |
| CVE-2026-46254 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: AppArmor: Allow apparmor to handle unaligned dfa tables The dfa tables can originate from kernel or userspace | |
| CVE-2026-46255 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: don't explicitly disable clocks in .remove() The clocks in fsl_edma_engine::muxclk are al | |
| CVE-2026-46256 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages LOCALIO is an NFS loopback mount opt |
| CVE-2026-46257 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP8 |
| CVE-2026-46258 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: Avoid NULL dereference in linehandle_create() In linehandle_create(), there is a statement like th |
| CVE-2026-46259 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading real_parent in do_task_stat() When reading /proc/[pid]/stat, d |
| CVE-2026-46260 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node(). syzbot reported out-of-bound read in fib6_add_rt2node(). |
| CVE-2026-46261 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() platform_get_resource_byname() can r |
| CVE-2026-46262 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("ASoC: fsl_xc |
| CVE-2026-46263 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream encoder index v3 eng_id can be negative and that stream_enc_regs[] c |
| CVE-2026-46264 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devm_add_action_or_reset() failure the provided cleanup action |
| CVE-2026-46265 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM warning When sunrpc is used, if a reset triggered, our wq may lead the following | |
| CVE-2026-46266 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW so |
| CVE-2026-46267 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb queues and fr |
| CVE-2026-46268 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378773 has already changed the initial page | |
| CVE-2026-46269 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k230 pinctrl driv |
| CVE-2026-46270 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting I |
| CVE-2026-46271 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary link In case of multi-link connection, WCN7850 firmware crashes |
| CVE-2026-46272 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition between sysfs and perf mode When trying to run perf and sysfs mode simu |
| CVE-2026-46273 | Modified | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not support segment |
| CVE-2026-46274 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending() io_wq_remove_pending() needs to fix up w |
| CVE-2026-46275 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-After |
| CVE-2026-46276 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix zero-size GDS range init on RDNA4 RDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip | |
| CVE-2026-46277 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio after calling ->folio_free() The contents of a device folio can imme | |
| CVE-2026-46278 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix segfault when updating ftrace mask Fix invalid data access by passing right data for debu |
| CVE-2026-46279 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocated before page_ext initialization Due to initialization ordering, |
| CVE-2026-46280 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file close to avoid use-after-free Patch series "Minor hmm_test fixes and |
| CVE-2026-46281 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and |
| CVE-2026-46282 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device_property_read_string() fails, str is |
| CVE-2026-46283 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() tpm_dev_release() uses plain kfree() to f | |
| CVE-2026-46284 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or default_huge |
| CVE-2026-46285 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release() In docg3_release(), the docg3 pointer is obtained from casca |
| CVE-2026-46286 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selecting the high resolution When selecting the high resolution | |
| CVE-2026-46287 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove module For the copper NIC with external PHY, the driver cal |
| CVE-2026-46288 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_changeset() The variable 'parent' is assigned the value of 'nc |
| CVE-2026-46289 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fix bugs in extract_iter_to_sg()" |
| CVE-2026-4629 | Modified | 未確認 | CWE-266 | A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This ac |
| CVE-2026-46290 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU softirq changes Since commit d02198550423 ("x86/fpu: Improve cr | |
| CVE-2026-46291 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_digest_key Use print_hex_dump_devel() for dumping sensitive HM | |
| CVE-2026-46292 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain throu |
| CVE-2026-46293 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output registration UBSAN reported an out of bounds |
| CVE-2026-46294 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl |
| CVE-2026-46295 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty Fall back to apic_find_highest_vector() wh | |
| CVE-2026-46296 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe() back to s3c6 |
| CVE-2026-46297 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, request_threaded_irq() is used with a primary han | |
| CVE-2026-46298 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing ->ioctl handler or ->release handler, if |
| CVE-2026-46299 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize |
| CVE-2026-46301 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing t |
| CVE-2026-46302 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently there can only be a single open of /sys/fs/s | |
| CVE-2026-46303 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->cont_extent ve |
| CVE-2026-46304 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queue_work() runs on nvmet-wq and c |
| CVE-2026-46305 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc The return value of kzalloc_flex( |
| CVE-2026-46306 | Modified | 未確認 | CWE-198 | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field Compression (PFC |
| CVE-2026-46307 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to do an array-index-out-of-bou |
| CVE-2026-46308 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy() In scpsys_get_bus_protection_lega |
| CVE-2026-46309 | Analyzed | 未確認 | CWE-401, CWE-524 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise Add validation in xe_vm_madvise_ioctl( |
| CVE-2026-46310 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When unloading the module on gen 4, we hit a NUL |
| CVE-2026-46311 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm root bo and wptr_obj |
| CVE-2026-46312 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP | |
| CVE-2026-46313 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp->psys is confirmed to be an error pointer |
| CVE-2026-46314 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to prevent infinite loop v3d_get_extensions() walks a userspace-prov |
| CVE-2026-46315 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields in | |
| CVE-2026-46316 | Modified | 未確認 | CWE-362, CWE-911 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache |
| CVE-2026-46317 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_lock kvm->arch.nested_mmus[] is walked under kvm->mmu_lock, |
| CVE-2026-46318 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" This reverts commit ea52cb24cd3f ("mm/hugetlbfs: u | |
| CVE-2026-46319 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When looking up a flow table in act_ct in tcf_ct_flo |
| CVE-2026-46320 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than ETH_HLEN w |
| CVE-2026-46321 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_one() returns -EINVAL on a frame shorter than | |
| CVE-2026-46322 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in tun_xdp_one(), the function set |
| CVE-2026-46323 | Modified | 未確認 | CWE-123, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb, wi |
| CVE-2026-46324 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flow |
| CVE-2026-46325 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementation incorrectly hand |
| CVE-2026-46326 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer struct initialisation Make sure that the spi_transfer struct is z | |
| CVE-2026-46327 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The function dm_blk_report_zones tests if the device is suspended wi |
| CVE-2026-46328 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond setting the rlim | |
| CVE-2026-46329 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts I/O requests beyond the end of the filesystem | |
| CVE-2026-46330 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40. As |
| CVE-2026-46331 | Modified | 未確認 | CWE-190, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for s |
| CVE-2026-46332 | Analyzed | 未確認 | CWE-120 | In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive buffering cc1352_bootloader_rx() appends each serdev chunk in |
| CVE-2026-46340 | Modified | 未確認 | CWE-770 | Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non- |
| CVE-2026-46342 | Analyzed | 未確認 | CWE-349, CWE-444, CWE-79 | Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.1.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to bef |
| CVE-2026-46348 | Deferred | 未確認 | CWE-918 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, the list of disallowed IP address ranges was lacking an IP address |
| CVE-2026-46349 | Deferred | 未確認 | CWE-347 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, Mastodon's normalization of incoming activities signed with Linked- |
| CVE-2026-46357 | Deferred | 未確認 | CWE-20 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker sends a speciall |
| CVE-2026-46373 | Analyzed | 未確認 | CWE-674 | SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide |
| CVE-2026-46374 | Analyzed | 未確認 | CWE-400 | SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrusted users can provide |
| CVE-2026-46386 | Deferred | 未確認 | CWE-1188, CWE-1392, CWE-502, CWE-798 | OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docker image ships ENV SECRET_KEY_BASE=OVERWRITE_ME as the defaul |
| CVE-2026-46389 | Analyzed | 未確認 | CWE-287, CWE-303 | UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS Core's Identity deployment. In versions 0.11.0 through 0.26.0, |
| CVE-2026-46390 | Deferred | 未確認 | CWE-639 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version 26.0.0, the gitlist plugin is exposed to unauthenticated users, |
| CVE-2026-46391 | Deferred | 未確認 | CWE-183, CWE-918 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and prior to version 26.0.0 of @haxtheweb/open-apis, multiple functions conduct subst |
| CVE-2026-46392 | Deferred | 未確認 | CWE-178, CWE-434 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively |
| CVE-2026-46393 | Deferred | 未確認 | CWE-918 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. An authenticated Server-Side Request Forgery (SSRF) vulnerability in versions prior to 26.0.0 allows authentica |
| CVE-2026-46394 | Deferred | 未確認 | CWE-78 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an OS command injection vulnerability exists in the Git.php library of the HAXcms PHP |
| CVE-2026-46395 | Deferred | 未確認 | CWE-200, CWE-321, CWE-327 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` function in the HAXcms Node.js backend contains two critical crypto |
| CVE-2026-46396 | Deferred | 未確認 | CWE-79 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitizati |
| CVE-2026-46397 | Deferred | 未確認 | CWE-22, CWE-73 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an Authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline en |
| CVE-2026-46398 | Deferred | 未確認 | CWE-614 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version 26.0.0, the haxcms_refresh_token cookie is set without the Secu |
| CVE-2026-46399 | Deferred | 未確認 | CWE-15, CWE-73, CWE-78 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attack |
| CVE-2026-46400 | Deferred | 未確認 | CWE-434 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version 25.0.0, the file upload functionality in HAXCMS PHP only valida |
| CVE-2026-46401 | Deferred | 未確認 | CWE-613 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper session termination vulnerability where authentication tokens |
| CVE-2026-46406 | Analyzed | 未確認 | CWE-200, CWE-377, CWE-59 | Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path (/tmp/claude/response.md) without |
| CVE-2026-46411 | Deferred | 未確認 | CWE-248 | FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.2, authorized clients have the ability to exceed the permitted over-commit of their writ |
| CVE-2026-46417 | Analyzed | 未確認 | CWE-918 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 1 |
| CVE-2026-46423 | Deferred | 未確認 | CWE-347 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's SAML servic |
| CVE-2026-46432 | Deferred | 未確認 | CWE-94 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, LMDeploy is vulnerable to arbitrary code execution through hardco |
| CVE-2026-46433 | Analyzed | 未確認 | CWE-125 | lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling me |
| CVE-2026-46440 | Analyzed | 未確認 | CWE-522 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, the checkBasicAuth endpoint validates credentials in plaintext with |
| CVE-2026-46441 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the assistant update endp |
| CVE-2026-46442 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, |
| CVE-2026-46443 | Analyzed | 未確認 | CWE-200 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when credentials are fetched with a credentialName filter parameter |
| CVE-2026-46444 | Analyzed | 未確認 | CWE-862 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRUD endpoints for OpenAI Assistants Vector Store have no authe |
| CVE-2026-46447 | Modified | 未確認 | CWE-669 | OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info. |
| CVE-2026-46448 | Analyzed | 未確認 | CWE-669 | In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation. |
| CVE-2026-46461 | Analyzed | 未確認 | CWE-284 | Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this |
| CVE-2026-46475 | Analyzed | 未確認 | CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, assistant create and update mass-assignment allows cross-workspace |
| CVE-2026-46476 | Analyzed | 未確認 | CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-works |
| CVE-2026-46477 | Analyzed | 未確認 | CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset create and update mass-assignment allows cross-workspace da |
| CVE-2026-46478 | Analyzed | 未確認 | CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, DatasetRow create and update mass-assignment allows cross-workspace |
| CVE-2026-46479 | Analyzed | 未確認 | CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluation create and update mass-assignment allows cross-workspace |
| CVE-2026-46480 | Analyzed | 未確認 | CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluator create and update mass-assignment allows cross-workspace |
| CVE-2026-46481 | Deferred | 未確認 | CWE-201 | OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigger a TEST_CONNECTION workflow for a Database Service and receive, in the HTTP 20 |
| CVE-2026-46484 | Deferred | 未確認 | CWE-22, CWE-285 | Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale |
| CVE-2026-46486 | Deferred | 未確認 | CWE-22 | MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise. Prior to version 2026.5.12, there is a path tr |
| CVE-2026-46489 | Deferred | 未確認 | CWE-434, CWE-79 | SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authenticated administrator |
| CVE-2026-46490 | Analyzed | 未確認 | CWE-91 | samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e |
| CVE-2026-46491 | Deferred | 未確認 | CWE-22 | SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to version 7.0.3, simplesamlphp-module-casserver builds file paths fo |
| CVE-2026-46492 | Analyzed | 未確認 | CWE-80, CWE-87 | md-fileserver allows for local viewing of markdown files in a browser. Prior to version 1.10.3, a cross-site scripting (XSS) vulnerability exists in the application’s Markdown rend |
| CVE-2026-46493 | Deferred | 未確認 | CWE-338 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generating salts, which is unsuitable. Version 26.0.1 fixes the issue |
| CVE-2026-46496 | Deferred | 未確認 | CWE-116, CWE-79 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 26.0.0 due to improper sanitizati |
| CVE-2026-46497 | Deferred | 未確認 | CWE-918 | Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been pa |
| CVE-2026-46511 | Deferred | 未確認 | CWE-522, CWE-79, CWE-922 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Stored XSS alongside dynamic token exposure in the `/system/ |
| CVE-2026-46517 | Deferred | 未確認 | CWE-1188, CWE-915, CWE-94 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardcoded "trust_remote_code=True" enables HF supply-chain RCE wi |
| CVE-2026-46518 | Analyzed | 未確認 | CWE-79, CWE-862 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.1, a stored cross-site scripting vulnerability in th |
| CVE-2026-46519 | Deferred | 未確認 | CWE-863 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.6.0, mcp-server-kubernetes exposes three environment variables (ALLOW |
| CVE-2026-46520 | Modified | 未確認 | CWE-122, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different |
| CVE-2026-46521 | Analyzed | 未確認 | CWE-131, CWE-252, CWE-787, CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF enc |
| CVE-2026-46522 | Modified | 未確認 | CWE-400, CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check in the MIFF decoder, |
| CVE-2026-46523 | Modified | 未確認 | CWE-416, CWE-825 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image can trigger a heap-use- |
| CVE-2026-46529 | Deferred | 未確認 | CWE-77, CWE-829, CWE-88 | Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1 |
| CVE-2026-46532 | Analyzed | 未確認 | CWE-125 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0, an out-of-bounds read exists in the BlueDroid AVRCP vendor |
| CVE-2026-46539 | Deferred | 未確認 | CWE-345 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a logic flaw in BlockInclusionProof::is_bloc |
| CVE-2026-46540 | Deferred | 未確認 | CWE-841 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::rebranch() adopts a fo |
| CVE-2026-46541 | Deferred | 未確認 | CWE-754 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, iIn handle_dht_get(), the DhtResults accumul |
| CVE-2026-46542 | Deferred | 未確認 | CWE-617 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, a denial-of-service vulnerability exists in |
| CVE-2026-46543 | Deferred | 未確認 | CWE-617 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by sen |
| CVE-2026-46545 | Deferred | 未確認 | CWE-248 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote, unauthenticated denial-of-service |
| CVE-2026-46546 | Analyzed | 未確認 | CWE-74, CWE-79 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.53.0, an authenticated user could supply specially crafted |
| CVE-2026-46547 | Deferred | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, a reflected XSS vulnerability exists in the Page Leaving Warning page. The ncRedirectUrl and ncBackUr |
| CVE-2026-46548 | Deferred | 未確認 | CWE-918 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the request-filtering-agent SSRF protection was non-functional in the four notification webhook plugi |
| CVE-2026-46549 | Deferred | 未確認 | CWE-863 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the OAuth token strategy attached oauth_scope and oauth_granted_resources to the request user, but th |
| CVE-2026-46550 | Deferred | 未確認 | CWE-614 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the refresh-token cookie was set with httpOnly: true but missing both the secure flag and the sameSit |
| CVE-2026-46551 | Deferred | 未確認 | CWE-770 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.4, the uploadViaURL path in the v1/v2 attachment API did not enforce NC_ATTACHMENT_FIELD_SIZE against th |
| CVE-2026-46552 | Deferred | 未確認 | CWE-285 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, shared-base sessions were granted the same base-member capabilities as authenticated viewers. Using o |
| CVE-2026-46553 | Deferred | 未確認 | CWE-770 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the upload-by-URL path did not enforce NC_ATTACHMENT_FIELD_SIZE against either the remote file's adve |
| CVE-2026-46554 | Deferred | 未確認 | CWE-613 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.4, deleted API tokens continued to authenticate requests until their cache entry expired, because the au |
| CVE-2026-46557 | Analyzed | 未確認 | CWE-674 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23, due to a missing depth check a stack overflow can occur in |
| CVE-2026-46558 | Analyzed | 未確認 | CWE-639, CWE-862 | Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and o |
| CVE-2026-46559 | Analyzed | 未確認 | CWE-193, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an incorrect check in the JP2 will result i |
| CVE-2026-46580 | Analyzed | 未確認 | CWE-829 | In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and could override or extend the AI agent's |
| CVE-2026-46601 | Deferred | 未確認 | The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. | |
| CVE-2026-46602 | Deferred | 未確認 | The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumpti | |
| CVE-2026-46604 | Analyzed | 未確認 | CWE-787 | The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset. |
| CVE-2026-46605 | Analyzed | 未確認 | CWE-285 | Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions. Thi |
| CVE-2026-46606 | Deferred | 未確認 | CWE-78 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine (glances/plugins/vms/engines/virsh.py) passes VM domain name |
| CVE-2026-46607 | Deferred | 未確認 | CWE-502 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, |
| CVE-2026-46608 | Deferred | 未確認 | CWE-183, CWE-942 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server (glances -s) introduced a configurable CORS origin list in version 4.5.3 |
| CVE-2026-46609 | Analyzed | 未確認 | CWE-79 | Umbraco is an ASP.NET CMS. From version 14.0.0 to before version 17.4.0, authenticated users are able to inject HTML into an input field, which is rendered in the confirmation dial |
| CVE-2026-46611 | Deferred | 未確認 | CWE-346, CWE-350 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server (glances -s, implemented in glances/server.py) does not validate the HTT |
| CVE-2026-46612 | Deferred | 未確認 | CWE-306 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, the Fission s |
| CVE-2026-46614 | Deferred | 未確認 | CWE-284, CWE-862 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, the Fission r |
| CVE-2026-46616 | Analyzed | 未確認 | CWE-601 | Umbraco is an ASP.NET CMS. Prior to versions 13.14.0 and 17.4.0, some of the Surface Controllers in the CMS provide to support member related operations fail to validate redirect U |
| CVE-2026-46617 | Deferred | 未確認 | CWE-250, CWE-269, CWE-538 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, Fission runti |
| CVE-2026-46618 | Deferred | 未確認 | CWE-250, CWE-269, CWE-78 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, before the ro |
| CVE-2026-46622 | Deferred | 未確認 | CWE-312 | SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strings in the api_tokens |
| CVE-2026-46625 | Modified | 未確認 | CWE-1321, CWE-915 | JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal assign() helper copies properties with for...in + plain assign |
| CVE-2026-46642 | Analyzed | 未確認 | CWE-79 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary JavaScript in the editor's origin when t |
| CVE-2026-46643 | Deferred | 未確認 | CWE-78 | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.1, on POSIX, escapeshellarg(‘/usr/bin/wkhtmltopdf’) returns t |
| CVE-2026-46645 | Deferred | 未確認 | CWE-862 | SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to version 0.25.1, the ajax_lookup endpoint in application.py bypasses the is_accessible() access control check |
| CVE-2026-46654 | Deferred | 未確認 | CWE-1240, CWE-345 | Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce id |
| CVE-2026-46656 | Deferred | 未確認 | CWE-285, CWE-613 | Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has b |
| CVE-2026-46657 | Deferred | 未確認 | CWE-212, CWE-613 | Bludit is a content management system. Versions prior to 3.22.0 have a vulnerability in the user management logic that allows deactivated accounts to maintain access via persistent |
| CVE-2026-46668 | Deferred | 未確認 | CWE-285 | SpiceDB is an open source database system for creating and managing security-critical application permissions. From version 1.15.0 to before version 1.52.0, caveat structures with |
| CVE-2026-46669 | Analyzed | 未確認 | CWE-20 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the openvm-pairing guest library's try_honest_pairing_check fun |
| CVE-2026-46673 | Deferred | 未確認 | CWE-770 | Russh is a Rust SSH client & server library. Prior to version 0.60.3, CryptoVec used unchecked capacity growth, unchecked length arithmetic, and unsafe allocation/locking paths. In |
| CVE-2026-46679 | Deferred | 未確認 | CWE-20, CWE-400, CWE-401 | libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions in @libp2p/gossipsub allow an unauthenticated single peer to |
| CVE-2026-46683 | Deferred | 未確認 | CWE-918 | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the |
| CVE-2026-46689 | Deferred | 未確認 | CWE-248, CWE-400, CWE-674 | Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endpoint with a ?filter= query string of a few thousand nested p |
| CVE-2026-46690 | Analyzed | 未確認 | CWE-125, CWE-415, CWE-704, CWE-787 | unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX |
| CVE-2026-46692 | Analyzed | 未確認 | CWE-122 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -di |
| CVE-2026-46693 | Analyzed | 未確認 | CWE-362, CWE-567 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -di |
| CVE-2026-46695 | Deferred | 未確認 | CWE-284 | Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, B |
| CVE-2026-46697 | Deferred | 未確認 | CWE-918 | Fediverse Embeds embeds fediverse posts on WordPress sites. Prior to version 1.5.8, Fediverse Embeds registered an unauthenticated REST route ftf/media-proxy (includes/Media_Proxy. |
| CVE-2026-46698 | Deferred | 未確認 | CWE-918 | Fediverse Embeds embeds fediverse posts on WordPress sites. Prior to version 1.5.9, Fediverse Embeds registered the unauthenticated AJAX action wp_ajax_nopriv_ftf_get_site_info (in |
| CVE-2026-46699 | Deferred | 未確認 | CWE-284 | conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.61.0, a vulnerability |
| CVE-2026-46702 | Deferred | 未確認 | CWE-770 | Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabled, russh accepted compressed packets whose on-wire size pas |
| CVE-2026-46703 | Deferred | 未確認 | CWE-22 | Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, B |
| CVE-2026-46705 | Deferred | 未確認 | CWE-287 | Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, the russh server authentication path keeps internal userauth state across SSH_MSG_ |
| CVE-2026-46710 | Analyzed | 未確認 | CWE-426 | Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During installation, |
| CVE-2026-46716 | Deferred | 未確認 | CWE-269, CWE-78, CWE-862 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember user can create a scheduled |
| CVE-2026-46717 | Deferred | 未確認 | CWE-863, CWE-918 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, nezha's dashboard supports two user role |
| CVE-2026-46718 | Analyzed | 未確認 | CWE-470 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Use |
| CVE-2026-46732 | Analyzed | 未確認 | CWE-362 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnera |
| CVE-2026-46733 | Analyzed | 未確認 | CWE-284 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with local access could poten |
| CVE-2026-46734 | Analyzed | 未確認 | CWE-295 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could p |
| CVE-2026-46735 | Analyzed | 未確認 | CWE-78 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera |
| CVE-2026-46739 | Modified | 未確認 | CWE-150, CWE-93 | Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could i |
| CVE-2026-46741 | Modified | 未確認 | CWE-150, CWE-93 | Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untruste |
| CVE-2026-46746 | Analyzed | 未確認 | CWE-78 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, al |
| CVE-2026-46747 | Analyzed | 未確認 | CWE-26 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFile |
| CVE-2026-46748 | Analyzed | 未確認 | CWE-250 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected system includes a binary that is configured with the cap_dac_override capability. |
| CVE-2026-46749 | Analyzed | 未確認 | CWE-760 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt s |
| CVE-2026-46751 | Deferred | 未確認 | A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.2.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue. | |
| CVE-2026-46752 | Deferred | 未確認 | CWE-122 | Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.0.4 through 2.15.0. Users are recommended to upgrade to versio |
| CVE-2026-46764 | Modified | 未確認 | CWE-639 | The Event Log detail endpoint `GET /api/v2/eventLogs/{event_log_id}` in Apache Airflow fetched audit-log rows directly by numeric ID after only the generic Audit Log permission che |
| CVE-2026-46765 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-46766 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46767 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-46768 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnera |
| CVE-2026-46769 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected ar |
| CVE-2026-46770 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 1 |
| CVE-2026-46771 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected ar |
| CVE-2026-46772 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 |
| CVE-2026-46773 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-46774 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-46776 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-46777 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46778 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-46779 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-46780 | Analyzed | 未確認 | CWE-306 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-46781 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-46782 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-46783 | Analyzed | 未確認 | CWE-306 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-46784 | Analyzed | 未確認 | CWE-284 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-46785 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46786 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46787 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to |
| CVE-2026-46788 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46789 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46790 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46791 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46792 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-46793 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Database User). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0 |
| CVE-2026-46794 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-46795 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46796 | Analyzed | 未確認 | CWE-601 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46797 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46798 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46799 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46800 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46801 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46802 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-46803 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-46804 | Modified | 未確認 | CWE-269 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46805 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46806 | Analyzed | 未確認 | CWE-601 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46807 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily e |
| CVE-2026-46808 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-46809 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46810 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-46812 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-46813 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-46814 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-46815 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnera |
| CVE-2026-46816 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnera |
| CVE-2026-46825 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnera |
| CVE-2026-46832 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 13.5 a |
| CVE-2026-46838 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-46844 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-46845 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-46846 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-46847 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-46848 | Modified | 未確認 | CWE-284 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploita |
| CVE-2026-46849 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Other). The supported version that is affected is 9.2.38. Easily exploit |
| CVE-2026-46850 | Analyzed | 未確認 | CWE-94 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerabilit |
| CVE-2026-46851 | Analyzed | 未確認 | CWE-94 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to |
| CVE-2026-46852 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46853 | Analyzed | 未確認 | CWE-79 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46854 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 13.5 and |
| CVE-2026-46855 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46856 | Analyzed | 未確認 | CWE-79 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and |
| CVE-2026-46857 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are |
| CVE-2026-46858 | Analyzed | 未確認 | CWE-284 | Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics). Supported versions that are affected are 13. |
| CVE-2026-46859 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-46860 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 9.0.0-9.7.0. Easily exploitable vulnerability allo |
| CVE-2026-46861 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL NDB Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.11-8.0.46, 8.4.0-8.4.9 and 9.0 |
| CVE-2026-46862 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable v |
| CVE-2026-46863 | Analyzed | 未確認 | CWE-400 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 8.4.0-8.4 |
| CVE-2026-46864 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-46865 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 13 |
| CVE-2026-46866 | Modified | 未確認 | CWE-400 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-46867 | Modified | 未確認 | CWE-269 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 13 |
| CVE-2026-46868 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 13 |
| CVE-2026-46869 | Analyzed | 未確認 | CWE-352 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Dump and Load). Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitab |
| CVE-2026-46870 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Difficult to exploit vulnerabil |
| CVE-2026-46871 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerabilit |
| CVE-2026-46872 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Install). Supported versions that are affected are 13.5 and 24.1. Ea |
| CVE-2026-46873 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Difficult to exploit vulne |
| CVE-2026-46874 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Easily exploitable vulnerability al |
| CVE-2026-46875 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Deployment Library). Supported versions that are affected are 13.5 an |
| CVE-2026-46877 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnera |
| CVE-2026-46878 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46879 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46880 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46881 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46882 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46883 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46884 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerabil |
| CVE-2026-46885 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability all |
| CVE-2026-46886 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerabil |
| CVE-2026-46887 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerabil |
| CVE-2026-46888 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). Supported versions that are affected are 17.0-26.5. Easily exploitable vulne |
| CVE-2026-46889 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerabil |
| CVE-2026-46890 | Analyzed | 未確認 | CWE-284, CWE-287, CWE-306 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerabil |
| CVE-2026-46891 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable). The supported version that is affected is 9.2. Easily e |
| CVE-2026-46892 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. |
| CVE-2026-46893 | Analyzed | 未確認 | CWE-269 | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Easily exploi |
| CVE-2026-46894 | Analyzed | 未確認 | CWE-352, CWE-601, CWE-640 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Home Page). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-46895 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46896 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46897 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46898 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46899 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46900 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46901 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46902 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily |
| CVE-2026-46903 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infrastructure Security). Supported versions that are affected are 9.2. |
| CVE-2026-46904 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46905 | Analyzed | 未確認 | CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easi |
| CVE-2026-46906 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46907 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle JD Edwards (component: Order Promising Integration). The supported version that is affected is 9.2 |
| CVE-2026-46908 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable). The supported version that is affected is 9.2. Easily e |
| CVE-2026-46909 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46910 | Analyzed | 未確認 | CWE-20, CWE-200, CWE-284, CWE-306, CWE-400 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0- |
| CVE-2026-46911 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Project Costing product of Oracle JD Edwards (component: Job Costing). The supported version that is affected is 9.2. Easily exploit |
| CVE-2026-46912 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easi |
| CVE-2026-46913 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Eas |
| CVE-2026-46914 | Analyzed | 未確認 | CWE-269, CWE-400 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low |
| CVE-2026-46915 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-46916 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management Specs). Supported versions that are affecte |
| CVE-2026-46918 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-46919 | Analyzed | 未確認 | CWE-284, CWE-287, CWE-306 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily explo |
| CVE-2026-46920 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Difficult to |
| CVE-2026-46921 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily explo |
| CVE-2026-46922 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-46925 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Difficult to |
| CVE-2026-46926 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily explo |
| CVE-2026-46927 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-46928 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-46929 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-46930 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affe |
| CVE-2026-46931 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.1 |
| CVE-2026-46932 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-46933 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-46934 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-46935 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-46937 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-46938 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-46939 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-46940 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-46942 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-287, CWE-306 | Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12 |
| CVE-2026-46944 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-46945 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-46946 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-46947 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-46949 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-46950 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-46951 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-46952 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-46953 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-46955 | Analyzed | 未確認 | CWE-352, CWE-601, CWE-79 | Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit v |
| CVE-2026-46956 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-46957 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficul |
| CVE-2026-46958 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-46959 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-46960 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-46961 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-46962 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-46963 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are |
| CVE-2026-46964 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are |
| CVE-2026-46965 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are |
| CVE-2026-46966 | Analyzed | 未確認 | CWE-269, CWE-284, CWE-306 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are |
| CVE-2026-46967 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.3 |
| CVE-2026-46969 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-46970 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-46971 | Modified | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-46972 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12 |
| CVE-2026-46973 | Analyzed | 未確認 | CWE-269, CWE-287, CWE-306 | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12 |
| CVE-2026-46974 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Difficult to exploit vulnerability |
| CVE-2026-46976 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-46977 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnera |
| CVE-2026-46978 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported version that is affected is 11.4. Easily exploitable vulner |
| CVE-2026-46979 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces). The supported version that is affected is 9.2 |
| CVE-2026-47065 | Analyzed | 未確認 | CWE-502 | ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed. When the serialised stream contains a TC_PRO |
| CVE-2026-47093 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-47103 | Modified | 未確認 | CWE-94, CWE-95 | Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supplying malicious SCXML document |
| CVE-2026-47105 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-47106 | Deferred | 未確認 | CWE-79 | Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a stored cross-site scripting vulnerability in the course search functionality that allows authentica |
| CVE-2026-47110 | Deferred | 未確認 | CWE-241 | Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the a |
| CVE-2026-47117 | Deferred | 未確認 | CWE-94 | OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the |
| CVE-2026-47120 | Deferred | 未確認 | CWE-862, CWE-863 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember can fire other users' cron |
| CVE-2026-47124 | Deferred | 未確認 | CWE-200 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can c |
| CVE-2026-47131 | Deferred | 未確認 | CWE-913 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookupSetter__ |
| CVE-2026-47135 | Deferred | 未確認 | CWE-693 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combine |
| CVE-2026-47137 | Deferred | 未確認 | CWE-913 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the com |
| CVE-2026-47138 | Deferred | 未確認 | CWE-1333 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.77 and 9.9.1-alpha.1, an unauthenticated attacker who |
| CVE-2026-47139 | Deferred | 未確認 | CWE-693 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding public network builtins from the wildcard builtin option. With this configuration d |
| CVE-2026-47140 | Deferred | 未確認 | CWE-693 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as module, worker_threads, cluster, vm, repl, and inspe |
| CVE-2026-47141 | Deferred | 未確認 | CWE-668 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The di |
| CVE-2026-47145 | Analyzed | 未確認 | CWE-617 | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the |
| CVE-2026-47146 | Analyzed | 未確認 | CWE-617 | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the |
| CVE-2026-47147 | Analyzed | 未確認 | CWE-125 | In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read back to the requester. T |
| CVE-2026-47148 | Analyzed | 未確認 | CWE-125 | In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must |
| CVE-2026-47149 | Analyzed | 未確認 | CWE-125 | In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process. These messages must come from |
| CVE-2026-47150 | Analyzed | 未確認 | CWE-787 | In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and location of this writ |
| CVE-2026-47151 | Analyzed | 未確認 | CWE-787 | In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location of this data is limit |
| CVE-2026-47152 | Analyzed | 未確認 | CWE-369 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a device that has alre |
| CVE-2026-47153 | Analyzed | 未確認 | CWE-369 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must come from a device that has alre |
| CVE-2026-47154 | Analyzed | 未確認 | CWE-125 | In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These messages m |
| CVE-2026-47155 | Analyzed | 未確認 | CWE-345 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, vLLM's revision pinning controls do not consistently apply to all artifacts loaded for a |
| CVE-2026-47157 | Deferred | 未確認 | CWE-918 | aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 accepted server-supplied signup challenge paths and used them to build request URLs before val |
| CVE-2026-47162 | Modified | 未確認 | CWE-140, CWE-74, CWE-94 | Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pa |
| CVE-2026-47163 | Deferred | 未確認 | CWE-862 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.1, any guild member who can invoke slash commands can use /automod a |
| CVE-2026-47165 | Analyzed | 未確認 | CWE-200 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, the distributed pixel cache was originally |
| CVE-2026-47166 | Analyzed | 未確認 | CWE-125, CWE-287 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -di |
| CVE-2026-47167 | Analyzed | 未確認 | CWE-94, CWE-95 | Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin |
| CVE-2026-47169 | Deferred | 未確認 | CWE-266 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a user with Manage Server / ManageGuild, but without Manage Roles |
| CVE-2026-47170 | Deferred | 未確認 | CWE-918 | Garlic-Hub manages digital signage network — devices, content, and playlists — from a single self-hosted interface. Prior to version 1.1, authenticated users can cause the server t |
| CVE-2026-47171 | Deferred | 未確認 | CWE-116 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a normal user can create a reminder whose message contains @every |
| CVE-2026-47172 | Deferred | 未確認 | CWE-829 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, the repository has a privileged deploy workflow that runs after t |
| CVE-2026-47173 | Deferred | 未確認 | CWE-116 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a normal user can create a ticket with a reason containing @every |
| CVE-2026-47174 | Deferred | 未確認 | CWE-829 | In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. The build workflow runs on pull requests, while the deploy wor |
| CVE-2026-47175 | Deferred | 未確認 | CWE-116 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in p |
| CVE-2026-47176 | Deferred | 未確認 | CWE-200 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can enable logging and choo |
| CVE-2026-47177 | Deferred | 未確認 | CWE-200 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcri |
| CVE-2026-47181 | Deferred | 未確認 | CWE-20, CWE-943 | PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection vulnerability in the password reset endpoint allows any authenticated user to cha |
| CVE-2026-47182 | Deferred | 未確認 | CWE-284 | Frappe is a full-stack web application framework. Prior to version 16.17.4, any authenticated user can access private files by guessing the file path. This issue has been patched i |
| CVE-2026-47188 | Deferred | 未確認 | CWE-116 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the latest release suppresses mentions in several moderation comm |
| CVE-2026-47189 | Deferred | 未確認 | CWE-639 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the AutoMod remove flow looks up and deletes rules by global data |
| CVE-2026-47190 | Analyzed | 未確認 | CWE-250 | IPAM is the IP address Manager for Cluster API Provider Metal3. Prior to versions 1.11.7, 1.12.4, and 1.13.0, the IPAM controller's ClusterRole granted full CRUD permissions (creat |
| CVE-2026-47193 | Deferred | 未確認 | CWE-200, CWE-862 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the journal diff endpoint discloses hidden historical field values without enforcing |
| CVE-2026-47195 | Deferred | 未確認 | CWE-863 | Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the mem |
| CVE-2026-47196 | Deferred | 未確認 | CWE-20 | Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not reject an empty result. Adding a rule containing only whitespa |
| CVE-2026-47197 | Deferred | 未確認 | CWE-862 | Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, a moderator with the relevant Discord permission bit can use the bot to moderate users above them in the Discord rol |
| CVE-2026-47200 | Analyzed | 未確認 | CWE-284, CWE-288 | Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to be |
| CVE-2026-47201 | Analyzed | 未確認 | CWE-20, CWE-347 | authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping whe |
| CVE-2026-47203 | Deferred | 未確認 | CWE-178, CWE-307 | Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal. In versions 4.38. |
| CVE-2026-47204 | Modified | 未確認 | CWE-476 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the envoy.filters.http.grpc_stats filt |
| CVE-2026-47205 | Analyzed | 未確認 | CWE-416 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free (UAF) vulnerability leading to |
| CVE-2026-47206 | Deferred | 未確認 | CWE-116 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer. |
| CVE-2026-47207 | Analyzed | 未確認 | CWE-416 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if an ext_proc server se |
| CVE-2026-47208 | Deferred | 未確認 | CWE-913 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from |
| CVE-2026-47209 | Deferred | 未確認 | CWE-693 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes t |
| CVE-2026-47210 | Deferred | 未確認 | CWE-913 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code execution in the host process when untrusted code |
| CVE-2026-47213 | Deferred | 未確認 | CWE-404 | Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. In versions 0.8.2 and pri |
| CVE-2026-47214 | Analyzed | 未確認 | CWE-400, CWE-73 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and |
| CVE-2026-47216 | Deferred | 未確認 | CWE-754 | Typesense is a fast, typo-tolerant search engine. Prior to versions 29.1 and 30.2, there is an unauthenticated denial-of-service vulnerability in the /multi_search endpoint. A spec |
| CVE-2026-47220 | Modified | 未確認 | CWE-476 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVER_NAME(X:Y)% is used in log for |
| CVE-2026-47221 | Analyzed | 未確認 | CWE-476 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the router filter contains a null poin |
| CVE-2026-47222 | Deferred | 未確認 | CWE-125, CWE-191 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Ve |
| CVE-2026-47223 | Deferred | 未確認 | CWE-125, CWE-190 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Ve |
| CVE-2026-47224 | Deferred | 未確認 | CWE-125 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 phy |
| CVE-2026-47225 | Deferred | 未確認 | CWE-524 | Typesense is a fast, typo-tolerant search engine. Prior to versions 29.1 and 30.2, there is a cache isolation issue affecting search requests that use both server-side search resul |
| CVE-2026-47236 | Deferred | 未確認 | CWE-863 | Solidtime is an open-source time-tracking app. Prior to version 0.12.2, Solidtime defines an explicit invitations:view and members:view permissions that gates the official invitati |
| CVE-2026-47238 | Deferred | 未確認 | CWE-639, CWE-863 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of auth |
| CVE-2026-47240 | Deferred | 未確認 | CWE-77, CWE-93 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that i |
| CVE-2026-47241 | Deferred | 未確認 | CWE-162, CWE-182, CWE-186 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which |
| CVE-2026-47242 | Deferred | 未確認 | CWE-77, CWE-93 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the |
| CVE-2026-47244 | Analyzed | 未確認 | CWE-400 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, DefaultHttp2Connection.DefaultEndpoint i |
| CVE-2026-47248 | Deferred | 未確認 | CWE-209 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.78 and 9.9.1-alpha.2, Parse Server's GraphQL endpoint |
| CVE-2026-47250 | Deferred | 未確認 | CWE-88 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the kubectl_generic tool in mcp-server-kubernetes passes user-su |
| CVE-2026-47260 | Deferred | 未確認 | CWE-918 | Koel is a free, open-source music streaming solution. Prior to version 9.3.5, Koel validates the podcast feed URL via the SafeUrl rule (DNS resolution + public IP check), but the i |
| CVE-2026-47261 | Analyzed | 未確認 | CWE-284 | Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is given DirPerms::all() and FilePerms::READ without FilePerms::W |
| CVE-2026-47263 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, the M |
| CVE-2026-47264 | Analyzed | 未確認 | CWE-200 | Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, Detai |
| CVE-2026-47265 | Analyzed | 未確認 | CWE-346 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, cookies set with the `cookies` parameter on requests are sent after followi |
| CVE-2026-47267 | Deferred | 未確認 | CWE-918 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, the fix for CVE-2022-1285 prevents adding webooks or running webhooks with URLs with a hostname that resolves in lo |
| CVE-2026-47268 | Deferred | 未確認 | CWE-918 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.10, an authenticated Nezha dashboard user |
| CVE-2026-47277 | Deferred | 未確認 | CWE-22, CWE-59 | Runtipi is a personal homeserver orchestrator. In versions 4.9.1 through 4.9.3, Runtipi serves marketplace app logos from files inside cloned app-store repositories through an unau |
| CVE-2026-47279 | Deferred | 未確認 | CWE-284 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the public shared-view relation endpoints accepted a caller-supplied column ID without verifying that |
| CVE-2026-47281 | Modified | 未確認 | CWE-306, CWE-798, CWE-862 | Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-47284 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-47287 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-47288 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. |
| CVE-2026-47289 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-47291 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network. |
| CVE-2026-47292 | Analyzed | 未確認 | CWE-829, CWE-94 | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-47293 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
| CVE-2026-47294 | Modified | 未確認 | CWE-78 | Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a netwo |
| CVE-2026-47298 | Analyzed | 未確認 | CWE-285 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-47306 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads. This issue affects rlottie: before e2d19e3b150e0e4a9586fa90b56fd3061 |
| CVE-2026-47318 | Deferred | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before ce72b35a7ad0dded03051d3aa0ef75321c3bd035. |
| CVE-2026-47319 | Deferred | 未確認 | CWE-789 | Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before 0b4e308fa88c72cbb60cc8a2c1 |
| CVE-2026-47320 | Deferred | 未確認 | CWE-674, CWE-824 | Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Serialized Data Payloads. This issue af |
| CVE-2026-47324 | Deferred | 未確認 | CWE-79 | ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects. An authorized attacker (e.g |
| CVE-2026-47325 | Deferred | 未確認 | CWE-1391 | ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth (e.g., 12072000 for 1 |
| CVE-2026-47339 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache APISIX. An attacker can capitalise on authz-casdoor plugin under default configuration to authenticate themselves with credentials |
| CVE-2026-47340 | Modified | 未確認 | CWE-200 | Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache Dolph |
| CVE-2026-47341 | Analyzed | 未確認 | CWE-294 | Authentication Bypass by Capture-replay vulnerability in Apache APISIX. Attacker can benefit from certain configurations in hmac-auth to re-use a token forever, bypassing expiry. |
| CVE-2026-47342 | Analyzed | 未確認 | CWE-285 | A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges This issue affects Apache OFBiz: before 24.09.07. Us |
| CVE-2026-47343 | Deferred | 未確認 | CWE-862 | Non-privileged backend users with file mount access were able to perform write operations (move, delete, rename) on folders representing the root of an active file mount due to mis |
| CVE-2026-47344 | Deferred | 未確認 | CWE-436, CWE-79 | When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing |
| CVE-2026-47345 | Deferred | 未確認 | CWE-79 | Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version |
| CVE-2026-47346 | Deferred | 未確認 | CWE-178, CWE-862 | Backend users with file write permissions were able to upload form definition files with mixed-case extensions (e.g., .FORM.YAML) to bypass the Form Framework's upload restriction. |
| CVE-2026-47347 | Deferred | 未確認 | CWE-601 | Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used after it has passed the aforementioned sa |
| CVE-2026-47348 | Deferred | 未確認 | CWE-79 | Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in the search index without sanitization. When displayed in fr |
| CVE-2026-47349 | Deferred | 未確認 | CWE-862 | Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they were not authorized to modify. This issue affects TYPO3 CMS v |
| CVE-2026-47350 | Deferred | 未確認 | CWE-862 | Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.30 and 14.0.0-14.3 |
| CVE-2026-47351 | Deferred | 未確認 | CWE-200, CWE-862 | Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about record |
| CVE-2026-47352 | Deferred | 未確認 | CWE-862 | Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing access to files outside their permitted fi |
| CVE-2026-47365 | Awaiting Analysis | 未確認 | CWE-88 | Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to bypass cross-tenant authorization and execute arbi |
| CVE-2026-47366 | Deferred | 未確認 | CWE-284 | Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions be |
| CVE-2026-47367 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injectio |
| CVE-2026-47368 | Deferred | 未確認 | CWE-22 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or ins |
| CVE-2026-47369 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privi |
| CVE-2026-47370 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Comm |
| CVE-2026-47375 | Deferred | 未確認 | CWE-89 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, an authenticated user with columnAdd permission on a Postgres-backed base can inject arbitrary SQL in |
| CVE-2026-47376 | Deferred | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the password-reset page rendered the URL token directly into a JavaScript string literal in a server- |
| CVE-2026-47377 | Deferred | 未確認 | CWE-601 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the client-side hashRedirect plugin called window.location.replace() on a path extracted from the URL |
| CVE-2026-47378 | Deferred | 未確認 | CWE-639 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, Public shared-view endpoints exposed values from columns that the view owner had hidden, via three in |
| CVE-2026-47379 | Deferred | 未確認 | CWE-200, CWE-203 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back to strict-equality (===) comparison for legacy plaintext pas |
| CVE-2026-47380 | Deferred | 未確認 | CWE-208, CWE-307 | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user b |
| CVE-2026-47381 | Deferred | 未確認 | CWE-290 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, a user in one workspace could exercise another workspace's integration through the testConnection end |
| CVE-2026-47382 | Deferred | 未確認 | CWE-918 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the connection-test endpoint opened a raw TCP socket to the user-supplied database host without resol |
| CVE-2026-47383 | Deferred | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, an authenticated commenter could store HTML in row comments that executed as script when other users |
| CVE-2026-47384 | Deferred | 未確認 | CWE-89 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, an authenticated user with column-create permission can inject SQL into the bulk groupBy endpoint by |
| CVE-2026-47385 | Deferred | 未確認 | CWE-22 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, an authenticated user with base-create permission can attach a SQLite source pointing at an arbitrary |
| CVE-2026-47386 | Deferred | 未確認 | CWE-362 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, two concurrent token-exchange requests using the same OAuth authorization code could each mint a dist |
| CVE-2026-47387 | Deferred | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared form-view submit handler (packages/nc-gui/composables/useSharedFormViewStore.ts) in NocoDB |
| CVE-2026-47388 | Deferred | 未確認 | CWE-639 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, a low-privilege MCP token holder with knowledge of an attachment path could read any file in shared s |
| CVE-2026-47389 | Deferred | 未確認 | CWE-184, CWE-200, CWE-918 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, when using Ruby versions older than 3.4, PrivateAddressCheck.privat |
| CVE-2026-47430 | Analyzed | 未確認 | CWE-20 | ## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `commandDelegate sendPluginResult:callbackId:` with no fo |
| CVE-2026-47631 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network |
| CVE-2026-47633 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-47634 | Modified | 未確認 | CWE-74, CWE-79 | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing |
| CVE-2026-47635 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-47636 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-47637 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-47638 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-47639 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-4764 | Awaiting Analysis | 未確認 | CWE-862 | A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate pr |
| CVE-2026-47640 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-47641 | Modified | 未確認 | CWE-20 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-47643 | Analyzed | 未確認 | CWE-610, CWE-73 | External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network. |
| CVE-2026-47644 | Analyzed | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose info |
| CVE-2026-47645 | Analyzed | 未確認 | CWE-601 | Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-47647 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47648 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-47652 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-47653 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-47654 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-47655 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network. |
| CVE-2026-47656 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-47684 | Deferred | 未確認 | CWE-918 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.3.0, the private IP blocklist regex used in the URL downl |
| CVE-2026-47691 | Modified | 未確認 | CWE-345, CWE-346 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficient |
| CVE-2026-47692 | Analyzed | 未確認 | CWE-130 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Protocol v2 header generator emi |
| CVE-2026-47693 | Deferred | 未確認 | CWE-1236 | Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 are vulnerable to CSV Injection (Formula Injection) in its log export funct |
| CVE-2026-47706 | Analyzed | 未確認 | CWE-400, CWE-674 | Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter extension is vulnerable to an Application-level DOS due to a la |
| CVE-2026-47707 | Analyzed | 未確認 | CWE-400 | Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative |
| CVE-2026-47712 | Deferred | 未確認 | CWE-22 | Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, dulwich.porcelain.format_patch(outdir=...) der |
| CVE-2026-47733 | Deferred | 未確認 | CWE-79 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src valu |
| CVE-2026-47734 | Deferred | 未確認 | CWE-400, CWE-789 | Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.1.0 and prior to version 1.2.5, a client with push access could push a tiny cra |
| CVE-2026-47739 | Deferred | 未確認 | CWE-79 | Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, stored XSS in Note was possible due to lack of sanitization. This issue has been patched i |
| CVE-2026-47747 | Analyzed | 未確認 | CWE-122, CWE-787 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. In versions prior to master-584-0a7 |
| CVE-2026-47748 | Analyzed | 未確認 | CWE-125 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae0 |
| CVE-2026-47749 | Analyzed | 未確認 | CWE-122, CWE-787 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae0 |
| CVE-2026-47750 | Analyzed | 未確認 | CWE-787 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. In versions prior to master-584-0a7 |
| CVE-2026-47770 | Analyzed | 未確認 | CWE-674 | jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface |
| CVE-2026-47774 | Analyzed | 未確認 | CWE-405, CWE-409, CWE-770 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability in Envoy's HTTP/2 down |
| CVE-2026-47775 | Analyzed | 未確認 | CWE-209, CWE-327 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP filter's encrypt()/decrypt() fu |
| CVE-2026-47777 | Deferred | 未確認 | CWE-345, CWE-863 | Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a r |
| CVE-2026-47778 | Analyzed | 未確認 | CWE-158 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a structural flaw was identified in DefaultCert |
| CVE-2026-47825 | Analyzed | 未確認 | CWE-346 | Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux G |
| CVE-2026-47833 | Awaiting Analysis | 未確認 | CWE-59 | setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to cho |
| CVE-2026-47835 | Analyzed | 未確認 | CWE-943 | In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: sp |
| CVE-2026-47838 | Analyzed | 未確認 | CWE-287 | SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully |
| CVE-2026-47846 | Awaiting Analysis | 未確認 | CWE-798 | Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRA_USER environment |
| CVE-2026-47847 | Awaiting Analysis | 未確認 | CWE-798 | Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICA |
| CVE-2026-47899 | Deferred | 未確認 | CWE-749 | The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. An attacker with JavaScript exec |
| CVE-2026-47900 | Deferred | 未確認 | CWE-79 | Logseq is vulnerable to a stored cross-site scripting (XSS). A malicious plugin can include a JavaScript payload in the "name" field of its "package.json" file, which is rendered u |
| CVE-2026-47901 | Deferred | 未確認 | CWE-79 | Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attributes, such as event handlers, into their container element |
| CVE-2026-47902 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnera |
| CVE-2026-47903 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability t |
| CVE-2026-47904 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnera |
| CVE-2026-47905 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnera |
| CVE-2026-47906 | Analyzed | 未確認 | Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the co | |
| CVE-2026-47907 | Analyzed | 未確認 | CWE-284 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current u |
| CVE-2026-47908 | Analyzed | 未確認 | CWE-824 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the c |
| CVE-2026-47909 | Analyzed | 未確認 | CWE-20 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit th |
| CVE-2026-47910 | Analyzed | 未確認 | CWE-863 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. An attacker could exploit this |
| CVE-2026-47911 | Analyzed | 未確認 | CWE-787 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of |
| CVE-2026-47912 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47913 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47914 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47915 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47916 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47917 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47918 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47919 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47920 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47921 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47923 | Analyzed | 未確認 | CWE-125 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co |
| CVE-2026-47924 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could l |
| CVE-2026-47925 | Analyzed | 未確認 | CWE-190 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service |
| CVE-2026-47926 | Analyzed | 未確認 | CWE-125 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co |
| CVE-2026-47927 | Analyzed | 未確認 | CWE-125 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulne |
| CVE-2026-47928 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-47929 | Analyzed | 未確認 | CWE-863 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-47930 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker |
| CVE-2026-47931 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-47932 | Analyzed | 未確認 | CWE-22 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in |
| CVE-2026-47933 | Analyzed | 未確認 | CWE-79 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malici |
| CVE-2026-47934 | Analyzed | 未確認 | CWE-125 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulne |
| CVE-2026-47935 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47936 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47937 | Analyzed | 未確認 | CWE-427 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in th |
| CVE-2026-47938 | Analyzed | 未確認 | CWE-918 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exp |
| CVE-2026-47939 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47941 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47942 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47943 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47944 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47945 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47946 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47947 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47948 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47949 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47950 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47951 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47952 | Analyzed | 未確認 | CWE-122 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the conte |
| CVE-2026-47953 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47954 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47955 | Analyzed | 未確認 | CWE-416 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the cu |
| CVE-2026-47956 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47957 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47958 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47959 | Analyzed | 未確認 | CWE-121 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the cont |
| CVE-2026-47960 | Analyzed | 未確認 | CWE-611 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file sys |
| CVE-2026-47961 | Analyzed | 未確認 | CWE-125 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co |
| CVE-2026-47962 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47963 | Analyzed | 未確認 | CWE-125 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulne |
| CVE-2026-47964 | Analyzed | 未確認 | CWE-122 | DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-47965 | Analyzed | 未確認 | CWE-787 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of |
| CVE-2026-47966 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47970 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47972 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47973 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47974 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47975 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47977 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47978 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47980 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47981 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47982 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47983 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47985 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47986 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47987 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47989 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-47990 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-47991 | Analyzed | 未確認 | CWE-601 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature by |
| CVE-2026-47993 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48006 | Modified | 未確認 | CWE-401, CWE-772 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler permane |
| CVE-2026-48011 | Deferred | 未確認 | CWE-208 | Shopware is an open commerce platform. Prior to versions 6.6.10.18 and 6.7.10.1, an attacker is able to enumerate the usernames of administrator users by performing a timing attack |
| CVE-2026-48017 | Deferred | 未確認 | CWE-94 | DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpola |
| CVE-2026-48020 | Modified | 未確認 | CWE-22, CWE-288 | Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an u |
| CVE-2026-48028 | Deferred | 未確認 | CWE-354 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, Mastodon's normalization of incoming activities signed with Linked- |
| CVE-2026-48040 | Analyzed | 未確認 | CWE-125, CWE-787 | The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. When deriving nati |
| CVE-2026-48042 | Analyzed | 未確認 | CWE-1124 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack over |
| CVE-2026-48043 | Modified | 未確認 | CWE-400, CWE-401, CWE-772 | Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingDeco |
| CVE-2026-48044 | Analyzed | 未確認 | CWE-409 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability has been identified i |
| CVE-2026-48055 | Deferred | 未確認 | CWE-20, CWE-22 | Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identified in St |
| CVE-2026-48059 | Modified | 未確認 | CWE-1286, CWE-401 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in n |
| CVE-2026-48067 | Deferred | 未確認 | CWE-639 | Filament is a collection of full-stack components for accelerated Laravel development. From filament/actions 4.0.0 until 4.11.4 and 5.6.4 and from filament/tables 3.0.0 until 3.3.5 |
| CVE-2026-48089 | Deferred | 未確認 | CWE-285, CWE-863 | DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a DevGuard API instance with one or more public assets, any authenticated user — i |
| CVE-2026-48090 | Modified | 未確認 | CWE-416 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter (envoy.filters.http.oauth2) can l |
| CVE-2026-48092 | Modified | 未確認 | CWE-125 | 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. |
| CVE-2026-48095 | Modified | 未確認 | CWE-190, CWE-787 | 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed s |
| CVE-2026-48096 | Analyzed | 未確認 | CWE-345, CWE-668 | OpenFGA is an authorization/permission engine built for developers. Prior to version 1.16.0, when iterator caching is enabled, two distinct check requests can produce the same cach |
| CVE-2026-48101 | Analyzed | 未確認 | CWE-908 | 7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an An uninitialized memory disclosure vulnerability in the UEFI capsule (.scap) parser i |
| CVE-2026-48102 | Analyzed | 未確認 | CWE-125 | 7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image handler's File Identifi |
| CVE-2026-48103 | Analyzed | 未確認 | CWE-125 | 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows Imaging) archive handler's sec |
| CVE-2026-48104 | Analyzed | 未確認 | CWE-125, CWE-908 | 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused by a sparsely populate |
| CVE-2026-48107 | Deferred | 未確認 | CWE-20 | Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server coul |
| CVE-2026-48108 | Deferred | 未確認 | CWE-20 | Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, russh did not enforce the SSH identification-string rules as deliberately as OpenS |
| CVE-2026-48109 | Analyzed | 未確認 | CWE-20 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, A vulnerability exists in the optional LZ4 decompression path used by MessagePack compression mod |
| CVE-2026-48110 | Deferred | 未確認 | CWE-20 | Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.0, several russh client and server message handlers decoded attacker-controlled SSH strings, |
| CVE-2026-48111 | Modified | 未確認 | CWE-125 | 7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function |
| CVE-2026-48112 | Analyzed | 未確認 | CWE-125, CWE-190 | 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bo |
| CVE-2026-48114 | Deferred | 未確認 | CWE-287, CWE-89 | Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.0.0 and and above contain an unauthenticated SQL injection in the /harvest |
| CVE-2026-48117 | Deferred | 未確認 | CWE-287, CWE-302 | DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could regis |
| CVE-2026-48119 | Deferred | 未確認 | CWE-862 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service |
| CVE-2026-48124 | Deferred | 未確認 | CWE-829, CWE-94 | Cursor is a code editor built for programming with AI. In versions prior to 3.0.0, the Cursor Desktop could execute workspace-defined Claude hook commands from .claude/settings.loc |
| CVE-2026-48129 | Deferred | 未確認 | CWE-22 | Kestra is an open-source, event-driven orchestration platform. Prior to versions 1.3.19, 1.2.19, 1.1.19, and 1.0.43, Kestra task `inputFiles` writes rendered file names directly un |
| CVE-2026-48137 | Analyzed | 未確認 | CWE-822 | There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentiall |
| CVE-2026-48138 | Analyzed | 未確認 | CWE-125 | There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requi |
| CVE-2026-48139 | Analyzed | 未確認 | CWE-476 | There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash. Succ |
| CVE-2026-48140 | Analyzed | 未確認 | CWE-704 | There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially re |
| CVE-2026-48141 | Analyzed | 未確認 | CWE-401 | There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion. This affects NI grpc-device 2.17.0 and prior versions. |
| CVE-2026-48142 | Analyzed | 未確認 | CWE-125 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block with both source_charset utf |
| CVE-2026-48157 | Deferred | 未確認 | CWE-79 | Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses HttpException::setTitle() and/or |
| CVE-2026-48163 | Modified | 未確認 | CWE-78 | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, |
| CVE-2026-48165 | Modified | 未確認 | CWE-78 | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, |
| CVE-2026-48166 | Deferred | 未確認 | CWE-208 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the login page has an observable timing discrepancy that a |
| CVE-2026-48167 | Deferred | 未確認 | CWE-79 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry components render raw datab |
| CVE-2026-48187 | Analyzed | 未確認 | CWE-400, CWE-770 | An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This |
| CVE-2026-48188 | Analyzed | 未確認 | CWE-20 | An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication b |
| CVE-2026-48189 | Analyzed | 未確認 | CWE-200 | An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature |
| CVE-2026-48190 | Analyzed | 未確認 | CWE-276 | An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note |
| CVE-2026-48191 | Analyzed | 未確認 | CWE-276 | An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of a |
| CVE-2026-48192 | Deferred | 未確認 | CWE-94 | A vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Studio Pro 10.12 (All versions), Mendix Studio Pro 10.13 (All versions), Mendix Studio Pro 10. |
| CVE-2026-48208 | Analyzed | 未確認 | CWE-400, CWE-791 | An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email |
| CVE-2026-48209 | Analyzed | 未確認 | CWE-116, CWE-79 | An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting |
| CVE-2026-48250 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48251 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48256 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48258 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48264 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48265 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48266 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48268 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48271 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48276 | Analyzed | 未確認 | CWE-434 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in th |
| CVE-2026-48277 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-48280 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by |
| CVE-2026-48281 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-48282 | Analyzed | 掲載 | CWE-22 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a |
| CVE-2026-48283 | Analyzed | 未確認 | CWE-434 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in th |
| CVE-2026-48285 | Analyzed | 未確認 | CWE-918 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. An attacker could |
| CVE-2026-48286 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the con |
| CVE-2026-48288 | Analyzed | 未確認 | CWE-20 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A |
| CVE-2026-48289 | Analyzed | 未確認 | CWE-20 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A |
| CVE-2026-48291 | Analyzed | 未確認 | CWE-122 | Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-48292 | Analyzed | 未確認 | CWE-122 | Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-48293 | Analyzed | 未確認 | CWE-787 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current |
| CVE-2026-48294 | Analyzed | 未確認 | CWE-79 | Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerabi |
| CVE-2026-48297 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-48299 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-48300 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-48301 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-48303 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the con |
| CVE-2026-48304 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged at |
| CVE-2026-48305 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-48306 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-48307 | Analyzed | 未確認 | CWE-79 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicio |
| CVE-2026-48313 | Analyzed | 未確認 | CWE-22 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a |
| CVE-2026-48314 | Analyzed | 未確認 | CWE-22 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in |
| CVE-2026-48315 | Analyzed | 未確認 | CWE-20 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre |
| CVE-2026-48480 | Deferred | 未確認 | CWE-325 | The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not verif |
| CVE-2026-48485 | Deferred | 未確認 | CWE-116 | Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the latest release suppresses mentions when creating, unbanning, unwarning, kicking, muting, and unmuting, but store |
| CVE-2026-48488 | Deferred | 未確認 | CWE-328 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnerable |
| CVE-2026-48491 | Modified | 未確認 | CWE-288, CWE-807 | Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNICheck) that allows an |
| CVE-2026-48493 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. In versions prior to 8.6.0, a user with only users.edit can send a PATCH to /api/v1/users/{their_own_id} and grant themselves any |
| CVE-2026-48497 | Analyzed | 未確認 | CWE-480 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS filter is configured wit |
| CVE-2026-48500 | Deferred | 未確認 | CWE-862 | Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.52, 4.11.5, and 5.6.5, any schema can contain a file upload form field, |
| CVE-2026-48502 | Analyzed | 未確認 | CWE-1188, CWE-125, CWE-190, CWE-407, CWE-409, CWE-470, CWE-502, CWE-674, CWE-789 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.ReadDateTime() can allocate stack memory based on an attacker-controlled Messag |
| CVE-2026-48505 | Deferred | 未確認 | CWE-362, CWE-841 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, a flaw in the handling of recovery codes for app-based mul |
| CVE-2026-48506 | Analyzed | 未確認 | CWE-674 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.TrySkip() recursively descends into nested arrays and maps without incrementing |
| CVE-2026-48507 | Modified | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to lock ever |
| CVE-2026-48509 | Analyzed | 未確認 | CWE-1188 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, the parameterless MessagePackInputFormatter() constructor uses default serializer options, which |
| CVE-2026-48510 | Analyzed | 未確認 | CWE-409, CWE-770 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, when MessagePack-CSharp decompresses Lz4Block or Lz4BlockArray payloads, it reads declared uncomp |
| CVE-2026-48511 | Analyzed | 未確認 | CWE-407 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, ExpandoObjectFormatter.Deserialize populates System.Dynamic.ExpandoObject by calling IDictionary< |
| CVE-2026-48512 | Analyzed | 未確認 | CWE-674 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePack-CSharp's JSON conversion helpers contain multiple recursion paths that do not consist |
| CVE-2026-48513 | Analyzed | 未確認 | CWE-674 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, runtime-generated union deserializers emitted by DynamicUnionResolver do not call MessagePackSecu |
| CVE-2026-48514 | Analyzed | 未確認 | CWE-770 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, UnsafeBlitFormatterBase<T>.Deserialize reads an attacker-controlled byteLength from an extension |
| CVE-2026-48515 | Analyzed | 未確認 | CWE-770 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePack-CSharp's multi-dimensional array formatters read dimension lengths directly from the |
| CVE-2026-48516 | Analyzed | 未確認 | CWE-407 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, InterfaceLookupFormatter<TKey,TElement> constructs an internal Dictionary<TKey, IGrouping<TKey,TE |
| CVE-2026-48517 | Analyzed | 未確認 | CWE-470, CWE-502 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePack-CSharp's typeless deserialization includes MessagePackSerializerOptions.ThrowIfDeseri |
| CVE-2026-48518 | Deferred | 未確認 | CWE-352 | MultiJuicer is used to run separate Juice Shop instances on a central kubernetes cluster without the need for local instances. In versions 8.0.0 through 10.0.0, the team join endpo |
| CVE-2026-48519 | Analyzed | 未確認 | CWE-94 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulner |
| CVE-2026-48520 | Analyzed | 未確認 | CWE-73 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public Flows" in code) contains a potential arbitrar |
| CVE-2026-48529 | Deferred | 未確認 | CWE-284 | GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process- |
| CVE-2026-48546 | Deferred | 未確認 | CWE-693 | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function i |
| CVE-2026-48547 | Deferred | 未確認 | CWE-78 | KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the |
| CVE-2026-48556 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-48558 | Analyzed | 掲載 | CWE-347 | SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is config |
| CVE-2026-48559 | Deferred | 未確認 | CWE-79 | Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding malicious HTML |
| CVE-2026-48560 | Modified | 未確認 | CWE-502, CWE-79 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-48562 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-48563 | Modified | 未確認 | CWE-416, CWE-787 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-48565 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48566 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48567 | Analyzed | 未確認 | CWE-290 | Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-48568 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-48569 | Analyzed | 未確認 | CWE-20, CWE-23 | Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-48570 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-48573 | Modified | 未確認 | CWE-1329 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-48574 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
| CVE-2026-48575 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-48576 | Modified | 未確認 | CWE-1329 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-48578 | Modified | 未確認 | CWE-284 | Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48579 | Analyzed | 未確認 | CWE-285 | Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-48582 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-48583 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48584 | Analyzed | 未確認 | CWE-250 | Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-48587 | Analyzed | 未確認 | CWE-1023 | An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip leading or trailing whitespace from `Vary` |
| CVE-2026-48591 | Deferred | 未確認 | CWE-83 | Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Ear |
| CVE-2026-48594 | Modified | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies. Whe |
| CVE-2026-48595 | Modified | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects. Tesla.Middleware.FollowRedir |
| CVE-2026-48596 | Modified | 未確認 | CWE-113 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.a |
| CVE-2026-48597 | Modified | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mi |
| CVE-2026-48598 | Modified | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multip |
| CVE-2026-48599 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smugglin |
| CVE-2026-48610 | Deferred | 未確認 | CWE-284 | Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to m |
| CVE-2026-48611 | Deferred | 未確認 | CWE-287 | Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installati |
| CVE-2026-48612 | Deferred | 未確認 | CWE-352 | Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked to an attacker-contr |
| CVE-2026-48613 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL quer |
| CVE-2026-48615 | Analyzed | 未確認 | CWE-359 | A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages. When proxy credentials are embedded in the proxy URL, they may |
| CVE-2026-48616 | Analyzed | 未確認 | CWE-284 | Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files. Protected file downloads at /file-upload/:fil |
| CVE-2026-48617 | Analyzed | 未確認 | CWE-284 | A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intende |
| CVE-2026-48618 | Modified | 未確認 | CWE-176, CWE-289 | A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname |
| CVE-2026-48619 | Analyzed | 未確認 | CWE-400 | A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affect |
| CVE-2026-48681 | Analyzed | 未確認 | CWE-23 | OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image. |
| CVE-2026-48682 | Deferred | 未確認 | CWE-125 | FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser. In src/simple_packet_parser_ng.cpp, after validating that the packet contains a |
| CVE-2026-4870 | Analyzed | 未確認 | CWE-674 | IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser. |
| CVE-2026-48703 | Deferred | 未確認 | CWE-78 | Warp is an agentic development environment. From 0.2025.04.09.08.11.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution policy bypass in Agent code sear |
| CVE-2026-48704 | Deferred | 未確認 | CWE-20 | Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15.42.stable_01, Warp may open executable local files through the operating system |
| CVE-2026-48706 | Analyzed | 未確認 | CWE-120 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, a vulnerability exists in Envoy's TCP |
| CVE-2026-48708 | Deferred | 未確認 | CWE-362, CWE-567 | OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance (t |
| CVE-2026-48709 | Deferred | 未確認 | CWE-862 | OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, The ValidateArgumentType RPC endpoint in service/internal/api/api.go does n |
| CVE-2026-48712 | Analyzed | 未確認 | CWE-674 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages |
| CVE-2026-48713 | Analyzed | 未確認 | CWE-1321 | Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation keys (e.g. via i18next-http-middleware's miss |
| CVE-2026-48714 | Analyzed | 未確認 | CWE-1321 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In versions prior to 3.9.7, the missingKeyHandler blocked |
| CVE-2026-48715 | Analyzed | 未確認 | CWE-121 | radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` utility shipped with radvd contains a stack buffer overflow in the Route Information option p |
| CVE-2026-48716 | Deferred | 未確認 | CWE-22 | nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a filesystem path using the fileName field from an i |
| CVE-2026-48719 | Deferred | 未確認 | CWE-78 | Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A |
| CVE-2026-48720 | Deferred | 未確認 | CWE-20, CWE-73 | Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepts non-inline `OSC 1337;File` payloads from terminal out |
| CVE-2026-48721 | Deferred | 未確認 | CWE-180, CWE-693 | Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution permission-check bypass in the d |
| CVE-2026-48723 | Deferred | 未確認 | CWE-78 | The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the |
| CVE-2026-48724 | Analyzed | 未確認 | CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-24, when using an image with mask the Floyd-Steinberg ditherin |
| CVE-2026-48725 | Deferred | 未確認 | CWE-276 | Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp allows terminal output to request access to the local system |
| CVE-2026-48726 | Analyzed | 未確認 | CWE-613 | A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for `FabAuthManager` and `Ke |
| CVE-2026-48731 | Deferred | 未確認 | CWE-78 | Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the Linux external edit |
| CVE-2026-48732 | Deferred | 未確認 | CWE-78 | Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the legacy SSH backgrou |
| CVE-2026-48733 | Analyzed | 未確認 | CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search ope |
| CVE-2026-48734 | Analyzed | 未確認 | CWE-674 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, a crafted MVG file could result in a stack |
| CVE-2026-48743 | Analyzed | 未確認 | CWE-444 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a downstream HTTP/3 request |
| CVE-2026-48745 | Deferred | 未確認 | CWE-940 | Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and below, a single crafted d |
| CVE-2026-48746 | Modified | 未確認 | CWE-444, CWE-501 | vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers en |
| CVE-2026-48748 | Modified | 未確認 | CWE-770 | Netty is a network application framework for development of protocol servers and clients. Starting in version 4.2.0.Final and prior to version 4.2.15.Final, a memory exhaustion vul |
| CVE-2026-48759 | Deferred | 未確認 | CWE-639 | TypeBot is a chatbot builder tool. Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through cross-workspace Theme Template modification and deletion |
| CVE-2026-48764 | Deferred | 未確認 | CWE-918 | TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and checking whether the resolved IP belongs to a forbid |
| CVE-2026-48768 | Deferred | 未確認 | CWE-22, CWE-79 | TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/generate-upload-url is unauthenticated and uses unsanitized fileName input to cons |
| CVE-2026-48770 | Analyzed | 未確認 | CWE-125 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYDATA message to Notepa |
| CVE-2026-48772 | Analyzed | 未確認 | CWE-348, CWE-863 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 2.0.0 through 3.0.8, the ProxySQL MySQL frontend accepts the `PROXY UNKNOWN <addr> <addr> <port> <po |
| CVE-2026-48773 | Analyzed | 未確認 | CWE-787 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Versions 2.0.18 through 3.0.8 have a pre-authentication heap memory corruption vulnerability in the MySQL and Po |
| CVE-2026-48774 | Analyzed | 未確認 | CWE-20 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MCP `run_sql_readonly` tool violates its documented read-only |
| CVE-2026-48775 | Analyzed | 未確認 | CWE-502, CWE-913 | LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSer |
| CVE-2026-48776 | Analyzed | 未確認 | CWE-22, CWE-863 | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe |
| CVE-2026-48777 | Deferred | 未確認 | CWE-22 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable, 1.4.0-beta and 1.4.1-beta are vulnerable to Path Traversal through the publicPat |
| CVE-2026-48778 | Analyzed | 未確認 | CWE-78 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::value() (Parameters.cpp |
| CVE-2026-48779 | Modified | 未確認 | CWE-1050, CWE-400, CWE-770 | ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0 |
| CVE-2026-48780 | Deferred | 未確認 | CWE-287 | Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist |
| CVE-2026-48781 | Deferred | 未確認 | CWE-302, CWE-345, CWE-863 | Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a session-shape JWT using the |
| CVE-2026-48782 | Analyzed | 未確認 | CWE-918 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.56.0 through 1.101.0, 2.0.0b1, and 2.0.0b2, the cloud-metadata blo |
| CVE-2026-48783 | Deferred | 未確認 | CWE-345, CWE-639, CWE-749, CWE-862 | Postiz is an AI social media scheduling tool. Versions prior to 2.21.8 contained an unauthenticated endpoint that accepted a signed token and applied subscription-enforcement side |
| CVE-2026-48787 | Deferred | 未確認 | CWE-78 | gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the code-generation feature and MCP management interface can |
| CVE-2026-48788 | Deferred | 未確認 | CWE-436, CWE-79 | Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0 through 1.15.0 contain a Cross-Site Scripting (XSS) |
| CVE-2026-48789 | Deferred | 未確認 | CWE-22 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, on Windows, the document folder listing |
| CVE-2026-48793 | Deferred | 未確認 | CWE-88 | Jellyfin is an open source self hosted media server. Prior to 10.11.10, a potential FFmpeg argument injection vulnerability exists in the subtitle conversion code path. SubtitleEnc |
| CVE-2026-48794 | Deferred | 未確認 | CWE-178, CWE-863 | Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal. In versions 4.36. |
| CVE-2026-48797 | Deferred | 未確認 | CWE-1295, CWE-358, CWE-862 | Backpropagate is a Python library for fine-tuning large language models on a single GPU. In versions 1.1.0 and 1.1.1, the optional Reflex web UI exposes a training control plane wi |
| CVE-2026-48800 | Modified | 未確認 | CWE-78 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xml is read by NppXml::value(aNod |
| CVE-2026-4881 | Analyzed | 未確認 | CWE-862 | In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server level changes using a certain API endpo |
| CVE-2026-48814 | Deferred | 未確認 | CWE-306 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the MCP SSE server allows unauthenticated cross-origin MCP tool invocation due to an emp |
| CVE-2026-48817 | Analyzed | 未確認 | CWE-470 | Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and below, when dispatching a request, HTTPEndpoint selects the handler by lowercasing the HTTP method and look |
| CVE-2026-48818 | Modified | 未確認 | CWE-918 | Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as \\attacker.com\share can cause o |
| CVE-2026-48820 | Deferred | 未確認 | CWE-22, CWE-98 | CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.2.12, and 5.3.0 through 5.3.5, View::_ge |
| CVE-2026-48821 | Deferred | 未確認 | CWE-79 | Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a DOM-based Cross-Site Scripting (XSS) vulnerability in the Thumbnail Synchronizer feature. When an adm |
| CVE-2026-48822 | Deferred | 未確認 | CWE-79 | Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a stored Cross-Site Scripting (XSS) vulnerability in the Markdown-to-HTML conversion process used in th |
| CVE-2026-48823 | Deferred | 未確認 | CWE-79 | Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a stored Cross-Site Scripting (XSS) vulnerability in the tag filtering functionality of Shaarli. An aut |
| CVE-2026-48827 | Analyzed | 未確認 | CWE-22 | Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated |
| CVE-2026-48835 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions. |
| CVE-2026-48836 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions. |
| CVE-2026-48838 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions. |
| CVE-2026-48839 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics allows DOM-Based XSS. This issue affects WP Statisti |
| CVE-2026-48853 | Deferred | 未確認 | CWE-502, CWE-770 | Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM nod |
| CVE-2026-48854 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streami |
| CVE-2026-48855 | Modified | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery. The SSH_FXP_READLINK handler in ssh_sftpd send |
| CVE-2026-48856 | Modified | 未確認 | CWE-601 | Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Au |
| CVE-2026-48858 | Modified | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address. The ftp_in |
| CVE-2026-48859 | Modified | 未確認 | CWE-208 | Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password |
| CVE-2026-48860 | Modified | 未確認 | CWE-1025, CWE-863 | Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inet |
| CVE-2026-48861 | Deferred | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in elixir-mint Mint allows HTTP Request Splitting and HTTP Request Smuggling. In lib/mint/http1/request. |
| CVE-2026-48862 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint Mint allows attacker-controlled HTTP/2 servers to exhaust memory in a Mint client via PUSH_PROMISE |
| CVE-2026-48865 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress allows Reflected XSS. This issue affects LearnPress: fro |
| CVE-2026-48866 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal. This issue affects Gravity F |
| CVE-2026-48867 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions. |
| CVE-2026-48868 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions. |
| CVE-2026-48869 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions. |
| CVE-2026-48870 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. |
| CVE-2026-48871 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions. |
| CVE-2026-48872 | Deferred | 未確認 | CWE-639 | Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions. |
| CVE-2026-48873 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions. |
| CVE-2026-48874 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in GamiPress <= 7.8.7 versions. |
| CVE-2026-48875 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions. |
| CVE-2026-48876 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions. |
| CVE-2026-48878 | Deferred | 未確認 | CWE-497 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. |
| CVE-2026-48879 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Sergey AIWU allows Privilege Escalation. This issue affects AIWU: from n/a through 1.4.17. |
| CVE-2026-48880 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions. |
| CVE-2026-48881 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions. |
| CVE-2026-48882 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions. |
| CVE-2026-48883 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions. |
| CVE-2026-48885 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions. |
| CVE-2026-48886 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions. |
| CVE-2026-48887 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions. |
| CVE-2026-48889 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Amelia <= 2.3 versions. |
| CVE-2026-48895 | Analyzed | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The attacker could manipulate some client headers to perform an open-redirect, to potentially e |
| CVE-2026-48907 | Analyzed | 掲載 | CWE-284 | A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution. |
| CVE-2026-48908 | Analyzed | 掲載 | CWE-434 | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. |
| CVE-2026-48909 | Deferred | 未確認 | CWE-502 | SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the s |
| CVE-2026-48913 | Analyzed | 未確認 | CWE-416 | Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67. |
| CVE-2026-48914 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest wi |
| CVE-2026-48928 | Analyzed | 未確認 | CWE-284 | A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: **Node.js 22** |
| CVE-2026-48929 | Analyzed | 未確認 | CWE-287 | Rocket.Chat in versions <8.5.1, <8.4.4, <8.3.6, <8.2.6, <8.1.6, <8.0.7, <7.13.9, and <7.10.13 is vulnerable to unauthenticated file deletion. The deleteFileMessage Meteor method pe |
| CVE-2026-48930 | Analyzed | 未確認 | CWE-284 | A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerabili |
| CVE-2026-48931 | Modified | 未確認 | CWE-367 | A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported relea |
| CVE-2026-48933 | Modified | 未確認 | CWE-190, CWE-770 | A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all supported release lines |
| CVE-2026-48934 | Modified | 未確認 | CWE-295 | A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability affects all supported release lines: **Node.js 22**, **Node. |
| CVE-2026-48935 | Analyzed | 未確認 | CWE-276 | A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. `--allow-fs-read`. This vulnerability affects all su |
| CVE-2026-48936 | Analyzed | 未確認 | CWE-284 | A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one sup |
| CVE-2026-48937 | Analyzed | 未確認 | CWE-400 | A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: **Node.js |
| CVE-2026-48939 | Analyzed | 掲載 | CWE-434 | A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. |
| CVE-2026-48940 | Analyzed | 未確認 | CWE-79 | A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `embedVideo` POST field contains a raw `<script>` tag; K2 stores it verbatim and ren |
| CVE-2026-48941 | Analyzed | 未確認 | CWE-862 | The K2 frontend `item.checkin` task accepts an unauthenticated `sigProFolder` query parameter and uses it directly to address a `JFolder::delete()` call under `/media/k2/galleries/ |
| CVE-2026-48942 | Analyzed | 未確認 | CWE-79 | K2 ≤ 2.26 renders the `#__k2_users.image` column directly into HTML `src` attributes via two distinct templates, in both cases without HTML escaping. |
| CVE-2026-48943 | Analyzed | 未確認 | CWE-915 | K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`. A Registered Joomla user, by including the field `K2UserForm=1` in a standard `com_users` `p |
| CVE-2026-48944 | Analyzed | 未確認 | CWE-22 | The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SITE/` and passed to `JFile::copy()`. `JPath::clean` does NOT |
| CVE-2026-48945 | Analyzed | 未確認 | CWE-434 | The K2 article gallery upload path accepts a zip/tar archive, extracts it under `/media/k2/galleries/<id>/`, and only renames image files (gif/jpg/jpeg/png/webp) to safe names — no |
| CVE-2026-48946 | Analyzed | 未確認 | CWE-434 | The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches `\.php$` and executes them under the K2 web user. A K2 |
| CVE-2026-48964 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions. |
| CVE-2026-48965 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions. |
| CVE-2026-48966 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions. |
| CVE-2026-48967 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions. |
| CVE-2026-48969 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions. |
| CVE-2026-48970 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions. |
| CVE-2026-48979 | Awaiting Analysis | 未確認 | CWE-444 | PHP Standard Library (PSL) is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the Psl\H2\ServerConnect |
| CVE-2026-48980 | Deferred | 未確認 | CWE-454, CWE-807 | pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environment variables XRDP_SESSION, DISPLAY and TMUX allow environme |
| CVE-2026-48981 | Deferred | 未確認 | CWE-611 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, pam_usb calls xmlReadFile() with flags=0 when loading the configurati |
| CVE-2026-48982 | Deferred | 未確認 | CWE-362 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, when updating a one-time pad file, a temporary file is created using |
| CVE-2026-48983 | Deferred | 未確認 | CWE-367 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, a symlink race condition exists in per-device and per-user pad direct |
| CVE-2026-48984 | Deferred | 未確認 | CWE-14, CWE-226 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions 0.9.1 and below, the xfree() memory release helper in calls free() without first zero |
| CVE-2026-48985 | Deferred | 未確認 | CWE-476 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions 0.9.1 and below, pusb_is_loginctl_local() can cause a NULL dereference crash when par |
| CVE-2026-48986 | Deferred | 未確認 | CWE-835 | pam_usb provides hardware authentication for Linux using removable media. In pam_usb 0.9.1 and earlier, usb_get_process_parent_id() can cause an infinite loop DoS because it does n |
| CVE-2026-48988 | Analyzed | 未確認 | CWE-400 | markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic (O(n^2)) processing in the |
| CVE-2026-48989 | Awaiting Analysis | 未確認 | CWE-306 | Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication wh |
| CVE-2026-48990 | Deferred | 未確認 | CWE-400, CWE-770 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversiz |
| CVE-2026-48991 | Deferred | 未確認 | CWE-287 | XianYuLauncher is a Minecraft Java Edition launcher. In versions prior to 1.5.5, sensitive authentication artifacts could be exposed during a user-initiated login under certain loc |
| CVE-2026-48994 | Analyzed | 未確認 | CWE-122 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check of a return value could lea |
| CVE-2026-48995 | Analyzed | 未確認 | CWE-353 | pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfi |
| CVE-2026-48997 | Deferred | 未確認 | CWE-78 | e107 is a content management system (CMS). Versions 2.3.5 and earlier contain a command injection vulnerability in the ImageMagick resize destination path. In resize_image(), the |
| CVE-2026-48998 | Analyzed | 未確認 | CWE-20, CWE-918 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 contain improper Host header validation when parsing raw HTTP request messages and w |
| CVE-2026-49043 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions. |
| CVE-2026-49048 | Analyzed | 未確認 | CWE-89 | The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string w |
| CVE-2026-49049 | Analyzed | 未確認 | CWE-284 | The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameter |
| CVE-2026-49055 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions. |
| CVE-2026-49056 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions. |
| CVE-2026-49057 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions. |
| CVE-2026-49058 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions. |
| CVE-2026-49060 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a throu |
| CVE-2026-49061 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions. |
| CVE-2026-49062 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1 |
| CVE-2026-49063 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. |
| CVE-2026-49064 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n/a through 2.8.49. |
| CVE-2026-49065 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions. |
| CVE-2026-49066 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions. |
| CVE-2026-49067 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions. |
| CVE-2026-49068 | Deferred | 未確認 | CWE-497 | Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. |
| CVE-2026-49069 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Portfolio allows Reflected XSS. This issue affects WPZOOM Portfolio: f |
| CVE-2026-49070 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Knit Pay <= 9.4.0.0 versions. |
| CVE-2026-49071 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions. |
| CVE-2026-49072 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions. |
| CVE-2026-49073 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking allows Blind SQL Injection. This issue affects Dire |
| CVE-2026-49074 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions. |
| CVE-2026-49075 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions. |
| CVE-2026-49076 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects |
| CVE-2026-49077 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affec |
| CVE-2026-49078 | Deferred | 未確認 | CWE-1284 | Unauthenticated Other Vulnerability Type in WP Travel Engine <= 6.7.10 versions. |
| CVE-2026-49079 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions. |
| CVE-2026-49080 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions. |
| CVE-2026-49081 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions. |
| CVE-2026-49082 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons <= 1.4.8 versions. |
| CVE-2026-49083 | Deferred | 未確認 | CWE-266 | Contributor Privilege Escalation in LatePoint <= 5.5.1 versions. |
| CVE-2026-49084 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions. |
| CVE-2026-49085 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions. |
| CVE-2026-49104 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions. |
| CVE-2026-49105 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions. |
| CVE-2026-49106 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions. |
| CVE-2026-49107 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions. |
| CVE-2026-49108 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Moderno < 1.43 versions. |
| CVE-2026-49109 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.3 versions. |
| CVE-2026-49110 | Deferred | 未確認 | CWE-1284 | Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions. |
| CVE-2026-49111 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0. |
| CVE-2026-49112 | Deferred | 未確認 | CWE-35 | Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. |
| CVE-2026-49113 | Deferred | 未確認 | CWE-94 | Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions. |
| CVE-2026-49120 | Deferred | 未確認 | CWE-918 | Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal network reque |
| CVE-2026-49121 | Modified | 未確認 | CWE-502 | AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that al |
| CVE-2026-49133 | Deferred | 未確認 | CWE-22 | Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content director |
| CVE-2026-49134 | Deferred | 未確認 | CWE-377 | CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploiting a race c |
| CVE-2026-49135 | Deferred | 未確認 | CWE-377, CWE-59 | CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by ex |
| CVE-2026-49136 | Deferred | 未確認 | CWE-22 | Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that allows unauthent |
| CVE-2026-49138 | Deferred | 未確認 | CWE-918 | Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private network hosts by |
| CVE-2026-49139 | Deferred | 未確認 | CWE-918 | Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate Bot Framework |
| CVE-2026-49140 | Deferred | 未確認 | CWE-770 | Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaust process mem |
| CVE-2026-49141 | Deferred | 未確認 | CWE-639 | WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to |
| CVE-2026-49143 | Deferred | 未確認 | CWE-94 | BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitra |
| CVE-2026-49144 | Deferred | 未確認 | CWE-22 | BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to re |
| CVE-2026-49157 | Analyzed | 未確認 | CWE-276 | Incorrect Default Permissions vulnerability in Apache ActiveMQ. This issue affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. The default Jolokia authorization sett |
| CVE-2026-49160 | Analyzed | 未確認 | CWE-400 | Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network. |
| CVE-2026-49161 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-49185 | Analyzed | 未確認 | CWE-78 | The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection. |
| CVE-2026-49186 | Analyzed | 未確認 | CWE-287 | The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network d |
| CVE-2026-49187 | Analyzed | 未確認 | CWE-200 | The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse. |
| CVE-2026-49188 | Analyzed | 未確認 | CWE-489 | The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands. |
| CVE-2026-49189 | Analyzed | 未確認 | CWE-269 | Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations. |
| CVE-2026-49190 | Analyzed | 未確認 | CWE-78 | The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions. |
| CVE-2026-49191 | Analyzed | 未確認 | CWE-287 | The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages. |
| CVE-2026-49192 | Analyzed | 未確認 | CWE-639 | The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping. |
| CVE-2026-49193 | Analyzed | 未確認 | CWE-200 | Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet. |
| CVE-2026-49194 | Analyzed | 未確認 | CWE-287 | The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and directly enter an interactive shell interface. |
| CVE-2026-49202 | Analyzed | 未確認 | CWE-287 | Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft. |
| CVE-2026-49203 | Analyzed | 未確認 | CWE-287 | Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted. |
| CVE-2026-49204 | Analyzed | 未確認 | CWE-798 | Leftover debug modules contain fixed credentials for internal AWS Cognito test sandboxes, risking asset exploitation. |
| CVE-2026-49205 | Deferred | 未確認 | CWE-862 | phpMyFAQ is an open source FAQ web application. Versions prior to 4.1.4 have Missing Authorization in the API CategoryController. CVE-2026-24421 addressed this in the BackupContro |
| CVE-2026-49214 | Analyzed | 未確認 | CWE-113, CWE-20, CWE-93 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did not reject ASCII control characters, whitespace, or DEL in first-party URI host |
| CVE-2026-49218 | Modified | 未確認 | CWE-1284, CWE-20 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could re |
| CVE-2026-49219 | Analyzed | 未確認 | CWE-200, CWE-22, CWE-78, CWE-863 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can re |
| CVE-2026-49220 | Deferred | 未確認 | CWE-79 | Jellyfin is an open source self hosted media server. Prior to 10.11.9, a potential XSS attack exists in Jellyfin which can allow a non-privileged user to execute arbitrary Javascri |
| CVE-2026-49230 | Analyzed | 未確認 | CWE-354 | Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt plugin under default configuration is vulnerable to authentication bypass. This issue |
| CVE-2026-49231 | Analyzed | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in opa plugin. An attacker could relay spoofed identity headers to upstream capitalising on non-default configuration in opa plugin |
| CVE-2026-49232 | Awaiting Analysis | 未確認 | CWE-755 | Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such as running out of file descriptors. This condition can be tri |
| CVE-2026-49233 | Analyzed | 未確認 | CWE-22 | Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cache. This allows for path traversal by ha |
| CVE-2026-49234 | Analyzed | 未確認 | CWE-20 | When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API acce |
| CVE-2026-49235 | Analyzed | 未確認 | CWE-755 | When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes. |
| CVE-2026-49241 | Analyzed | 未確認 | CWE-427, CWE-494, CWE-79, CWE-94 | The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension |
| CVE-2026-49246 | Deferred | 未確認 | CWE-22 | Jellyfin is an open source self hosted media server. Prior to 10.11.10, a specifically crafted MKV file containing forged filename tags can be leveraged to exploit missing path san |
| CVE-2026-49247 | Deferred | 未確認 | CWE-22 | Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog/Document endpoint accepts the Authorization header's Client and Version fields |
| CVE-2026-49248 | Deferred | 未確認 | CWE-61 | OneDev is a Git server with CI/CD, kanban, and packages. In versions 15.0.6 and below, TarUtils.untar() creates symbolic links verbatim from TAR entry getLinkName() without validat |
| CVE-2026-49252 | Deferred | 未確認 | CWE-1321 | deepstream is a server that allows clients and backend services to sync data, send messages and make rpcs at scale. Versions prior to 10.0.5 are vulnerable to Prototype Pollution. |
| CVE-2026-49257 | Deferred | 未確認 | CWE-306 | mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bou |
| CVE-2026-49260 | Deferred | 未確認 | CWE-78 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.5.1, `pontedilana/php-weasyprint` builds the shell command for WeasyPrint by p |
| CVE-2026-49261 | Modified | 未確認 | CWE-78 | MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 w |
| CVE-2026-49267 | Analyzed | 未確認 | CWE-295 | Apache Airflow's EmailOperator and the underlying `airflow.utils.email` helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment u |
| CVE-2026-49268 | Analyzed | 未確認 | CWE-90 | A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated |
| CVE-2026-49269 | Awaiting Analysis | 未確認 | CWE-200 | Apple M1 GPUs retain register file data between compute shader dispatches from different processes. A sandboxed Metal attacker app can run a GPU reader shader that reads stale regi |
| CVE-2026-49270 | Analyzed | 未確認 | CWE-1230 | Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Brokers that are configured with a network connec |
| CVE-2026-49271 | Analyzed | 未確認 | CWE-125 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using unit_offset |
| CVE-2026-49277 | Deferred | 未確認 | CWE-613 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12, Rocket.Chat does not revo |
| CVE-2026-49278 | Deferred | 未確認 | CWE-285 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12, in the visitors.info endp |
| CVE-2026-49286 | Deferred | 未確認 | CWE-502 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/php-weasyprint` guarded the output filename against the `pha |
| CVE-2026-49287 | Deferred | 未確認 | CWE-470 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.23 and 6.20.0, the fix for CVE-2026-41175 was incomplete. It addressed the issue in the query b |
| CVE-2026-49288 | Deferred | 未確認 | CWE-200, CWE-862, CWE-863 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.23 and 6.20.0, an authenticated Control Panel user could view metadata and content for resource |
| CVE-2026-49290 | Deferred | 未確認 | CWE-22, CWE-23, CWE-36 | Slopsmith is a self-contained web application for browsing, playing, and practicing Rocksmith 2014 Custom DLC (CDLC). Prior to 0.2.9-alpha.5, a path-traversal vulnerability in Slop |
| CVE-2026-49291 | Deferred | 未確認 | CWE-862 | mcp-memory-service is a semantic memory layer for AI applications. Prior to version 10.65.3, the HTTP MCP JSON-RPC endpoint at `/mcp` requires only OAuth `read` scope for all reque |
| CVE-2026-49293 | Analyzed | 未確認 | CWE-1333, CWE-400, CWE-407 | js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.0 parse hexadecimal / octal / binary integer literals via a hand |
| CVE-2026-49294 | Deferred | 未確認 | CWE-79 | Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. Versions 3.6.3 and prior are vulnerable to reflected cross-site scripting (XSS |
| CVE-2026-49295 | Analyzed | 未確認 | CWE-787 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in `decoder_context::p |
| CVE-2026-49298 | Analyzed | 未確認 | CWE-538 | A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API to be passed to the worker container as command-line ar |
| CVE-2026-4930 | Deferred | 未確認 | CWE-331 | SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). D |
| CVE-2026-49319 | Awaiting Analysis | 未確認 | CWE-294 | Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling |
| CVE-2026-49328 | Modified | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network re |
| CVE-2026-49336 | Deferred | 未確認 | CWE-178, CWE-200 | @microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API clients. In versions 1.0.0-preview.97 through 1.0.0-preview.101, `@microsoft/kiota-http-fet |
| CVE-2026-49337 | Deferred | 未確認 | CWE-770 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes `decoder_context::read_slice_NAL()` (`libd |
| CVE-2026-49338 | Deferred | 未確認 | CWE-285, CWE-639 | gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, the Subsonic API endpoints `/rest/deletePlaylist.view` and `/rest/get |
| CVE-2026-49339 | Deferred | 未確認 | CWE-22, CWE-639 | gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit `6dd71e6a3c966867ef8c900d359a7df75789f410` added an ownership |
| CVE-2026-49340 | Deferred | 未確認 | CWE-22, CWE-697, CWE-732 | gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, a logic error in `ServeCreateOrUpdatePlaylist` allows any authenticat |
| CVE-2026-49342 | Deferred | 未確認 | CWE-22 | YARD is a documentation generation tool for the Ruby programming language. Prior to version 0.9.44, YARD's static cache lookup reads a request path before the router's path cleanup |
| CVE-2026-49344 | Deferred | 未確認 | CWE-359 | Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's Query Engine (`/admin/queries/execute`) accepts a |
| CVE-2026-49345 | Deferred | 未確認 | CWE-918 | Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery (SSRF) vulnerability exists in |
| CVE-2026-49346 | Analyzed | 未確認 | CWE-190 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed |
| CVE-2026-49347 | Deferred | 未確認 | CWE-770 | Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates |
| CVE-2026-49355 | Deferred | 未確認 | CWE-200, CWE-639 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, `GET /api/v3/meetings/:meeting_id/agenda_items/:agenda_item_id` discloses private work package d |
| CVE-2026-49356 | Analyzed | 未確認 | CWE-200, CWE-22 | Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @ba |
| CVE-2026-49357 | Deferred | 未確認 | CWE-306, CWE-862 | Line Desktop MCP is a project that, while unaffiliated with the official line-bot-mcp-server, allows users to directly operate the LINE Desktop application on Windows or Mac via MC |
| CVE-2026-49358 | Deferred | 未確認 | CWE-73 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `AbstractGenerator::$temporaryFiles` is a public array, and `removeTempor |
| CVE-2026-49359 | Deferred | 未確認 | CWE-918 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/php-weasyprint` fetches the content of option values server- |
| CVE-2026-49361 | Analyzed | 未確認 | CWE-400, CWE-770 | Apache Fluss versions prior to 0.9.1 configure the Netty LengthFieldBasedFrameDecoder with Integer.MAX_VALUE as the maximum frame length, allowing unauthenticated remote attackers |
| CVE-2026-49396 | Deferred | 未確認 | CWE-352 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.0.14, cross-site GET request can trigger stor |
| CVE-2026-49397 | Deferred | 未確認 | CWE-200, CWE-285, CWE-863 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.0 to before version 2.0.14, private services (`EnableShowInService: |
| CVE-2026-49401 | Analyzed | 未確認 | CWE-176, CWE-41 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.14, Deno's permission system enforces filesystem and execution restrictions by comparing the requested path |
| CVE-2026-49402 | Analyzed | 未確認 | CWE-78 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:child_process implementation provided an escapeShellArg() helper used when callers passed sh |
| CVE-2026-49406 | Analyzed | 未確認 | CWE-22 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.12, when Deno was run in BYONM mode (nodeModulesDir: "manual"), the module resolver did not validate that a |
| CVE-2026-49411 | Modified | 未確認 | CWE-284 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.0, the Node.js compatibility TCP path checked the permission against the original hostname string before res |
| CVE-2026-49412 | Analyzed | 未確認 | CWE-416 | The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the lock. During this window another thread |
| CVE-2026-49413 | Analyzed | 未確認 | CWE-266 | The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set at the point where the |
| CVE-2026-49414 | Analyzed | 未確認 | CWE-179 | The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-re |
| CVE-2026-49416 | Analyzed | 未確認 | CWE-190 | The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buffer size calculation, resulting in a heap |
| CVE-2026-49417 | Analyzed | 未確認 | CWE-416 | Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused elsewhere while |
| CVE-2026-49432 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can |
| CVE-2026-49433 | Awaiting Analysis | 未確認 | CWE-352 | The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a maliciou |
| CVE-2026-49434 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. An attacker that has access to publish or modify entries in LDAP that matc |
| CVE-2026-49440 | Analyzed | 未確認 | CWE-325 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrime(candidate[, options][, callback]) and crypto.checkPrimeSync(candidate[, options]) |
| CVE-2026-49443 | Analyzed | 未確認 | CWE-287 | authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in on |
| CVE-2026-49444 | Analyzed | 未確認 | CWE-20 | n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python C |
| CVE-2026-49448 | Analyzed | 未確認 | CWE-287 | authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has been p |
| CVE-2026-49451 | Awaiting Analysis | 未確認 | CWE-674 | The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. From 2 |
| CVE-2026-49454 | Deferred | 未確認 | CWE-287, CWE-347 | Relyra is a strict-by-default SAML 2.0 Service Provider library for Elixir and Phoenix. Versions 1.0.0 and 1.1.0 accept forged SAML signatures because SignatureValue was not crypto |
| CVE-2026-49460 | Analyzed | 未確認 | CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires access |
| CVE-2026-49461 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires e |
| CVE-2026-49465 | Analyzed | 未確認 | CWE-22 | n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows could supply a local |
| CVE-2026-49468 | Modified | 未確認 | CWE-290 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditi |
| CVE-2026-49472 | Analyzed | 未確認 | CWE-116 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49475 | Analyzed | 未確認 | CWE-125, CWE-20, CWE-787 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49482 | Deferred | 未確認 | CWE-155, CWE-943 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #141, ClipBucket v5 contains an improper neutralization of SQL wildcard characters in the subtitle |
| CVE-2026-49486 | Modified | 未確認 | CWE-319 | The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although the control channel was TLS-protected the da |
| CVE-2026-49491 | Deferred | 未確認 | CWE-89 | Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by injecting SQL code into the 'rib' parameter. Attackers can |
| CVE-2026-49492 | Deferred | 未確認 | CWE-78 | Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document - th |
| CVE-2026-49493 | Deferred | 未確認 | CWE-94 | Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block content as code via vm.runInNewContext(), allowing arbitrar |
| CVE-2026-49494 | Deferred | 未確認 | CWE-191 | Xcitium Client Security (XCS) before 13.8.2.10019 and Comodo Internet Security (CIS) through 12.3.4.8162 (fix expected by 2026 Q3) contain an integer underflow vulnerability in the |
| CVE-2026-49495 | Analyzed | 未確認 | CWE-835 | Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. |
| CVE-2026-49496 | Analyzed | 未確認 | CWE-416 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocat |
| CVE-2026-49497 | Analyzed | 未確認 | CWE-22 | Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing |
| CVE-2026-49498 | Analyzed | 未確認 | CWE-89 | Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolat |
| CVE-2026-49502 | Modified | 未確認 | CWE-287 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially |
| CVE-2026-49506 | Analyzed | 未確認 | CWE-22 | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privilege |
| CVE-2026-49510 | Deferred | 未確認 | CWE-190 | Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects rlottie: before 21292665023e5074b38254432716866d00f1985f. |
| CVE-2026-49738 | Deferred | 未確認 | CWE-22 | The path allowance check in GeneralUtility::isAllowedAbsPath() performed a plain string prefix comparison without requiring a directory separator boundary, causing a path like /var |
| CVE-2026-49740 | Deferred | 未確認 | CWE-502 | TYPO3's cache frontend (VariableFrontend) and persistent key-value store (Registry) deserialized PHP payloads without integrity validation or class restrictions. An attacker with w |
| CVE-2026-49741 | Deferred | 未確認 | CWE-862, CWE-89 | Backend users with write access to the form_definition database table were able to directly create, update, or delete form definition records via DataHandler, bypassing the Form Fr |
| CVE-2026-49742 | Deferred | 未確認 | CWE-200, CWE-22 | Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer (FAL) via the Media Module. Since the fallback stor |
| CVE-2026-49753 | Deferred | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint Mint allows attacker-controlled HTTP/1 servers to desynchronise respon |
| CVE-2026-49754 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint Mint allows attacker-controlled HTTP/2 servers to exhaust memory in a Mint client (HTTP/2 CONTINUA |
| CVE-2026-49755 | Analyzed | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decom |
| CVE-2026-49756 | Analyzed | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via attacker-influenced part metadata. Req.Utils. |
| CVE-2026-49757 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in team-alembic AshAuthentication allows account takeover of local users via OAuth2/OIDC sign-in. AshAuthentication's OAuth2 and OI |
| CVE-2026-49759 | Modified | 未確認 | CWE-120, CWE-121 | Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk. The s |
| CVE-2026-49760 | Modified | 未確認 | CWE-121 | Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/sr |
| CVE-2026-49762 | Deferred | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who controls a version string to cause a denial of service throug |
| CVE-2026-49763 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions. |
| CVE-2026-49764 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions. |
| CVE-2026-49765 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.8 versions. |
| CVE-2026-49766 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions. |
| CVE-2026-49767 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions. |
| CVE-2026-49768 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions. |
| CVE-2026-49769 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions. |
| CVE-2026-49770 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions. |
| CVE-2026-49771 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection. This issue affects P |
| CVE-2026-49772 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection. This i |
| CVE-2026-49773 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions. |
| CVE-2026-49774 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion. This issue affects RD Station: from n/a through 5.6 |
| CVE-2026-49775 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions. |
| CVE-2026-49776 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions. |
| CVE-2026-49777 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Pr |
| CVE-2026-49778 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions. |
| CVE-2026-49780 | Deferred | 未確認 | CWE-266 | Customer Privilege Escalation in Dokan <= 5.0.2 versions. |
| CVE-2026-49781 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions. |
| CVE-2026-49782 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor We |
| CVE-2026-49818 | Analyzed | 未確認 | CWE-22 | The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../` segments res |
| CVE-2026-49821 | Deferred | 未確認 | CWE-441, CWE-862 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's bui |
| CVE-2026-49822 | Deferred | 未確認 | CWE-284, CWE-862 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a low-privile |
| CVE-2026-49823 | Deferred | 未確認 | CWE-284, CWE-863 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a Fission Fun |
| CVE-2026-49824 | Deferred | 未確認 | CWE-284, CWE-863 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, the Fission F |
| CVE-2026-4983 | Analyzed | 未確認 | CWE-79 | Open VSX Registry does not sanitize SVG files uploaded as extension icons prior to storage, and serves them with Content-Type: image/svg+xml without security headers such as Conten |
| CVE-2026-49839 | Analyzed | 未確認 | CWE-787 | jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assert |
| CVE-2026-49840 | Analyzed | 未確認 | CWE-122, CWE-195, CWE-20, CWE-787 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49841 | Analyzed | 未確認 | CWE-122, CWE-131 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49842 | Analyzed | 未確認 | CWE-400 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49843 | Analyzed | 未確認 | CWE-287 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49847 | Analyzed | 未確認 | CWE-674 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49848 | Analyzed | 未確認 | CWE-287 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardwar |
| CVE-2026-49851 | Deferred | 未確認 | CWE-1333, CWE-400, CWE-407, CWE-770 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in p |
| CVE-2026-49859 | Analyzed | 未確認 | CWE-693, CWE-918 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when fetch() was called, Deno checked the destination hostname against --deny-net rules but did not re-ch |
| CVE-2026-4986 | Deferred | 未確認 | CWE-862 | The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge |
| CVE-2026-49860 | Analyzed | 未確認 | CWE-918 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocket connection was opened, Deno checked the destination hostname against --deny-net rules bu |
| CVE-2026-49869 | Analyzed | 掲載 | CWE-184, CWE-287, CWE-78, CWE-918 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whiteli |
| CVE-2026-49871 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations. This defect allows a remote attacker that manages to send a victim to a webpag |
| CVE-2026-49872 | Analyzed | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can possibly authenticate itself with credentials from a different |
| CVE-2026-49875 | Modified | 未確認 | CWE-611 | Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) |
| CVE-2026-49877 | Analyzed | 未確認 | CWE-285 | Improper Authorization vulnerability in Apache ActiveMQ. An authenticated low-privilege Web Console user by default can access /admin/* paths in the Web Console. The default Jetty |
| CVE-2026-49938 | Analyzed | 未確認 | CWE-284 | A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper ac |
| CVE-2026-49940 | Analyzed | 未確認 | CWE-1289 | Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parse |
| CVE-2026-49941 | Analyzed | 未確認 | CWE-1287, CWE-674 | Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmas |
| CVE-2026-49942 | Analyzed | 未確認 | CWE-1289 | Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661) |
| CVE-2026-49943 | Deferred | 未確認 | CWE-121 | CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c. The as_path_match() func |
| CVE-2026-49948 | Deferred | 未確認 | CWE-862 | Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies |
| CVE-2026-49949 | Deferred | 未確認 | CWE-522 | CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-down |
| CVE-2026-49952 | Deferred | 未確認 | CWE-323 | Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database |
| CVE-2026-49953 | Deferred | 未確認 | CWE-804 | Discuz! X5.0 releases 20260320 through 20260610 contains a CAPTCHA bypass vulnerability that allows unauthenticated remote attackers to defeat challenge controls by exploiting limi |
| CVE-2026-49954 | Deferred | 未確認 | CWE-98 | Discuz! X5.0 releases 20260320 through 20260610 contain a local file inclusion vulnerability that allows authenticated administrators to execute arbitrary code by importing a speci |
| CVE-2026-49955 | Deferred | 未確認 | CWE-770 | Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly calling |
| CVE-2026-49956 | Deferred | 未確認 | CWE-862 | Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the se |
| CVE-2026-49957 | Deferred | 未確認 | CWE-22 | Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an |
| CVE-2026-49958 | Deferred | 未確認 | CWE-367 | Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows |
| CVE-2026-49959 | Deferred | 未確認 | CWE-78 | Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executabl |
| CVE-2026-49973 | Deferred | 未確認 | CWE-306 | Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_p |
| CVE-2026-49975 | Modified | 未確認 | CWE-409, CWE-789 | Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP S |
| CVE-2026-49979 | Analyzed | 未確認 | CWE-209, CWE-918 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POST /api/v1/admin/send-test-email endpoint accepts attacker-controlled smtpHost an |
| CVE-2026-49980 | Modified | 未確認 | CWE-306, CWE-78 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc-serve accepts unauthenticate |
| CVE-2026-49982 | Analyzed | 未確認 | CWE-20, CWE-22 | tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects only string values that contain the substring ... It is bypa |
| CVE-2026-49983 | Analyzed | 未確認 | CWE-863 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, environment access is gated by the env permission. You can deny it with --deny-env, or restrict it to a s |
| CVE-2026-49984 | Analyzed | 未確認 | CWE-180, CWE-200, CWE-22 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.23, the local internal-storage backend validates user-supplied paths for .. traversal before |
| CVE-2026-49991 | Deferred | 未確認 | CWE-22, CWE-862 | RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.4, authenticated users with only PutObject permission on their own bucket can exploit a path traversal vu |
| CVE-2026-49993 | Analyzed | 未確認 | CWE-749 | Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder from versions 3.15.4 to before 3.21.7 and 4.0.0 to before 4.4.7, ther |
| CVE-2026-50003 | Deferred | 未確認 | CWE-22 | A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths a |
| CVE-2026-50005 | Deferred | 未確認 | CWE-1392 | Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds. |
| CVE-2026-50008 | Deferred | 未確認 | CWE-863 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to before version 9.9.1-alpha.3, the routeAllowList serve |
| CVE-2026-50009 | Analyzed | 未確認 | CWE-200, CWE-330 | Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network |
| CVE-2026-50010 | Modified | 未確認 | CWE-347 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrust |
| CVE-2026-50011 | Modified | 未確認 | CWE-400, CWE-770 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, RedisArrayAggregator pre-allocates Array |
| CVE-2026-50014 | Analyzed | 未確認 | CWE-88 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm passes the lockfile-controlled git resolution.commit value to git fetch without a -- separator or commit-format validat |
| CVE-2026-50015 | Analyzed | 未確認 | CWE-22 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline (@pnpm/patch-package) performs no path validation on file paths extracted from .patch file |
| CVE-2026-50016 | Analyzed | 未確認 | CWE-23 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments. During install, |
| CVE-2026-50017 | Analyzed | 未確認 | CWE-200, CWE-522 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm can send user-level unscoped npm authentication credentials to a registry chosen by a repository-local .npmrc file. In |
| CVE-2026-50019 | Analyzed | 未確認 | CWE-200 | yt-dlp is a command-line audio/video downloader. From 2023.09.24 until 2026.06.09, if curl is used as an external downloader for yt-dlp, cookies may be leaked to an unintended host |
| CVE-2026-50020 | Analyzed | 未確認 | CWE-444 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, before reading the first request-line, ` |
| CVE-2026-50021 | Analyzed | 未確認 | CWE-354 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's tarball extraction worker skips integrity verification when the integrity field is absent from the lockfile resolutio |
| CVE-2026-50023 | Analyzed | 未確認 | CWE-641 | yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as . |
| CVE-2026-50026 | Deferred | 未確認 | CWE-862 | Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, a lack of permission checks in these endpoints allowed unauthorized access to resources. T |
| CVE-2026-50031 | Awaiting Analysis | 未確認 | CWE-121 | ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interf |
| CVE-2026-50033 | Deferred | 未確認 | CWE-427 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. |
| CVE-2026-50034 | Awaiting Analysis | 未確認 | CWE-319 | An attacker within BLE communication range can passively intercept wireless traffic and obtain sensitive health-related information, including glucose measurement values. |
| CVE-2026-50040 | Deferred | 未確認 | CWE-79 | Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to unsanitized content being echoed back in 404 error pages. An attacker can craft a malicious |
| CVE-2026-50052 | Awaiting Analysis | 未確認 | CWE-444 | In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request smuggling), w |
| CVE-2026-50076 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on Java/JVM platforms allows a remote attacker to bypass class reg |
| CVE-2026-50082 | Analyzed | 未確認 | CWE-306 | The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. This is an instance of "CWE-306: Missing Authenticati |
| CVE-2026-50083 | Analyzed | 未確認 | CWE-798 | The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estim |
| CVE-2026-50084 | Analyzed | 未確認 | CWE-862 | The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to any account. This is an instance of "CWE-862: Missing Autho |
| CVE-2026-50085 | Analyzed | 未確認 | CWE-306 | The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of |
| CVE-2026-50086 | Analyzed | 未確認 | CWE-327 | The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: M |
| CVE-2026-50087 | Analyzed | 未確認 | CWE-942 | The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrus |
| CVE-2026-50088 | Analyzed | 未確認 | CWE-942 | The Aqara Developer Portal (developer.aqara.com) and shared test environments (developer-test.aqara.com, aiot-test.aqara.com) exhibit cross-origin request sharing, which is an inst |
| CVE-2026-50089 | Analyzed | 未確認 | CWE-601 | The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1 |
| CVE-2026-50090 | Analyzed | 未確認 | CWE-1289 | The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of |
| CVE-2026-50091 | Analyzed | 未確認 | CWE-321, CWE-798 | Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-3 |
| CVE-2026-50099 | Deferred | 未確認 | CWE-538 | During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UA |
| CVE-2026-50100 | Deferred | 未確認 | CWE-427 | Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacke |
| CVE-2026-50101 | Deferred | 未確認 | CWE-262 | Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remains valid indefinitely an |
| CVE-2026-50107 | Analyzed | 未確認 | CWE-74 | When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of N |
| CVE-2026-50108 | Deferred | 未確認 | CWE-862 | The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. An a |
| CVE-2026-50110 | Deferred | 未確認 | CWE-798 | Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded |
| CVE-2026-50127 | Deferred | 未確認 | CWE-918 | Weblate is a web based localization tool. From version 5.15 to before version 2026.6, Weblate's VCS_RESTRICT_PRIVATE did not properly account for some transitional IPv6 ranges, mul |
| CVE-2026-50128 | Deferred | 未確認 | CWE-354 | Mastodon is a free, open-source social network server based on ActivityPub. From 4.3.0 until 4.5.11 and 4.4.18, Mastodon has a feature to let websites credit authors of their artic |
| CVE-2026-50129 | Deferred | 未確認 | CWE-248 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.11, 4.4.18, and 4.3.24, a DoS can be triggered by (Uncaught Exception vulerability), due to |
| CVE-2026-50131 | Deferred | 未確認 | CWE-1286, CWE-1389, CWE-918 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding |
| CVE-2026-50132 | Analyzed | 未確認 | CWE-284, CWE-352 | Budibase is an open-source low-code platform. Prior to 3.39.0, `GET /api/chat-links/:instance/:token/handoff` is a public endpoint (no auth required) that performs a permanent, sta |
| CVE-2026-50136 | Analyzed | 未確認 | CWE-306 | Budibase is an open-source low-code platform. Prior to 3.39.3, the application server exposes an unauthenticated endpoint that generates S3 PutObject presigned URLs using credentia |
| CVE-2026-50137 | Analyzed | 未確認 | CWE-862 | Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id (app_...) and an S3-source datasource id (ds_...) can |
| CVE-2026-50141 | Deferred | 未確認 | CWE-290, CWE-639 | Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate an |
| CVE-2026-50146 | Modified | 未確認 | CWE-80 | Astro is a web framework. Prior to 6.3.3, when a component uses a client:* directive, Astro inserts named slot content into a data-astro-template attribute without HTML escaping th |
| CVE-2026-50168 | Analyzed | 未確認 | CWE-346, CWE-918 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2 |
| CVE-2026-50169 | Analyzed | 未確認 | CWE-200, CWE-441, CWE-524 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15 20.3.22, and 19.2. |
| CVE-2026-50170 | Analyzed | 未確認 | CWE-524 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2 |
| CVE-2026-50171 | Analyzed | 未確認 | CWE-400, CWE-834 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2 |
| CVE-2026-50176 | Deferred | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-o |
| CVE-2026-50178 | Analyzed | 未確認 | CWE-79, CWE-94 | The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side Angular Language Service VS Code extension configures the t |
| CVE-2026-50184 | Analyzed | 未確認 | CWE-200, CWE-524 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2 |
| CVE-2026-50189 | Analyzed | 未確認 | CWE-183, CWE-918 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from |
| CVE-2026-50193 | Analyzed | 未確認 | CWE-400 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists w |
| CVE-2026-50194 | Deferred | 未確認 | CWE-288, CWE-639 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. When Steeltoe management endpoints versions 3.2.2 throu |
| CVE-2026-50196 | Deferred | 未確認 | CWE-20, CWE-400 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Discovery.Eureka prior to versions 4.2.0 an |
| CVE-2026-50200 | Deferred | 未確認 | CWE-200, CWE-319 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Management.Endpoint prior to version 4.2.0 |
| CVE-2026-50201 | Deferred | 未確認 | CWE-269, CWE-285 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Management.Endpoint prior to version 4.2.0 |
| CVE-2026-50202 | Deferred | 未確認 | CWE-668 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Security.Authentication.CloudFoundryBase pr |
| CVE-2026-50203 | Analyzed | 未確認 | CWE-22 | A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or compromised remote SFTP server write files outside the conf |
| CVE-2026-50205 | Analyzed | 未確認 | CWE-532 | System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data. |
| CVE-2026-50206 | Analyzed | 未確認 | CWE-78 | Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files. |
| CVE-2026-50207 | Analyzed | 未確認 | CWE-22 | The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity. |
| CVE-2026-50208 | Analyzed | 未確認 | CWE-330 | High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt |
| CVE-2026-50209 | Analyzed | 未確認 | CWE-732 | Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker |
| CVE-2026-50210 | Analyzed | 未確認 | CWE-200 | The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption. |
| CVE-2026-50211 | Analyzed | 未確認 | CWE-134 | Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers. |
| CVE-2026-50212 | Analyzed | 未確認 | CWE-400 | Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user endpoints, causing severe denial of service. |
| CVE-2026-50213 | Analyzed | 未確認 | CWE-798 | The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings. |
| CVE-2026-50214 | Analyzed | 未確認 | CWE-345 | The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans. |
| CVE-2026-50219 | Analyzed | 未確認 | CWE-416 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of |
| CVE-2026-50221 | Analyzed | 未確認 | CWE-918 | In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device) from client reque |
| CVE-2026-50223 | Analyzed | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user with Content/DataResource editing privileges to p |
| CVE-2026-50224 | Analyzed | 未確認 | CWE-200 | The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall limits, making internal API endpoints reachable over the WAN. |
| CVE-2026-50225 | Analyzed | 未確認 | CWE-306 | The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems to flood the database. |
| CVE-2026-50226 | Analyzed | 未確認 | CWE-321 | Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list cata |
| CVE-2026-50229 | Analyzed | 未確認 | CWE-80 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 1 |
| CVE-2026-50230 | Deferred | 未確認 | CWE-79 | Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and Jav |
| CVE-2026-50231 | Deferred | 未確認 | CWE-79 | Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerability in the log viewer that allows attackers to inject malicious scripts by exploiting un |
| CVE-2026-50232 | Deferred | 未確認 | CWE-79 | Lyrion Music Server 9.2.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through media file metadata tags like GENRE, ARTIST |
| CVE-2026-50233 | Deferred | 未確認 | CWE-548 | Lyrion Music Server 9.2.0 contains an arbitrary directory listing vulnerability in its readdirectory query, exposed through both the CLI service (TCP port 9090) and the HTTP JSON-R |
| CVE-2026-50234 | Deferred | 未確認 | CWE-22 | Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server |
| CVE-2026-50235 | Deferred | 未確認 | CWE-79 | Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in se |
| CVE-2026-50242 | Analyzed | 未確認 | CWE-306 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administ |
| CVE-2026-50244 | Deferred | 未確認 | CWE-862 | The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbitrary caller-supplied account identifier, without validating |
| CVE-2026-50245 | Deferred | 未確認 | CWE-306 | Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed. |
| CVE-2026-50254 | Deferred | 未確認 | CWE-401 | An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly |
| CVE-2026-50255 | Deferred | 未確認 | CWE-276 | Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with S |
| CVE-2026-50256 | Modified | 未確認 | CWE-121 | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a st |
| CVE-2026-50257 | Modified | 未確認 | CWE-416 | A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function poin |
| CVE-2026-50258 | Modified | 未確認 | CWE-121 | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes( |
| CVE-2026-50259 | Modified | 未確認 | CWE-121 | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The |
| CVE-2026-50260 | Modified | 未確認 | CWE-416 | A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-afte |
| CVE-2026-50261 | Modified | 未確認 | CWE-416 | A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying |
| CVE-2026-50262 | Modified | 未確認 | CWE-125 | An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number o |
| CVE-2026-50263 | Modified | 未確認 | CWE-416 | A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing t |
| CVE-2026-50264 | Modified | 未確認 | CWE-787 | An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments an |
| CVE-2026-50265 | Rejected | 未確認 | Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292 | |
| CVE-2026-50266 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" a |
| CVE-2026-50267 | Deferred | 未確認 | CWE-312, CWE-732 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Abstractions 4.0.0 through 4. |
| CVE-2026-50268 | Deferred | 未確認 | CWE-256, CWE-327 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4.1. |
| CVE-2026-50269 | Analyzed | 未確認 | CWE-113, CWE-93 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to mo |
| CVE-2026-50287 | Deferred | 未確認 | CWE-306 | AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCP_HT |
| CVE-2026-50292 | Analyzed | 未確認 | CWE-93 | In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution |
| CVE-2026-5038 | Analyzed | 未確認 | CWE-459 | Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage. Aborted or malformed multipart uploads leave orp |
| CVE-2026-50507 | Modified | 未確認 | CWE-306 | Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
| CVE-2026-50508 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-50511 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50512 | Modified | 未確認 | CWE-306 | Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50519 | Analyzed | 未確認 | CWE-1188 | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-50545 | Deferred | 未確認 | CWE-269, CWE-284, CWE-693 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, the Environme |
| CVE-2026-50548 | Analyzed | 未確認 | CWE-22 | Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox grants write access to the command |
| CVE-2026-50549 | Analyzed | 未確認 | CWE-59 | Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the agent canonicalizes the target |
| CVE-2026-50551 | Deferred | 未確認 | CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan contains a stored cross-site scripting (XSS) vulnerability in the Attribute View (database) as |
| CVE-2026-50552 | Deferred | 未確認 | CWE-918 | Koel is a free, open-source music streaming solution. Prior to version 9.7.1, Koel contains a Server-Side Request Forgery (SSRF) vulnerability in the radio station creation endpoin |
| CVE-2026-50555 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2 |
| CVE-2026-50556 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.16, 20.3.24, and 19.2 |
| CVE-2026-50557 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2. |
| CVE-2026-50559 | Modified | 未確認 | CWE-287, CWE-551, CWE-863 | Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.4.1, 3.27.5, and 3.20.6.2, Quarkus HTTP path-based auth |
| CVE-2026-50560 | Analyzed | 未確認 | CWE-770 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty HTTP/2 max header size handling pr |
| CVE-2026-50563 | Deferred | 未確認 | CWE-269, CWE-284 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Con |
| CVE-2026-50564 | Deferred | 未確認 | CWE-269, CWE-284, CWE-693 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Env |
| CVE-2026-50565 | Deferred | 未確認 | CWE-250, CWE-269, CWE-538 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission build |
| CVE-2026-50566 | Deferred | 未確認 | CWE-250, CWE-269 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a tenant with |
| CVE-2026-50567 | Deferred | 未確認 | CWE-22 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, Unarchive in |
| CVE-2026-50568 | Deferred | 未確認 | CWE-41 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, SanitizeFileP |
| CVE-2026-50569 | Deferred | 未確認 | CWE-20 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, HTTPTriggerSp |
| CVE-2026-50570 | Deferred | 未確認 | CWE-269, CWE-732 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, Fission added |
| CVE-2026-50573 | Analyzed | 未確認 | CWE-345 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, `pnpm install` in non-frozen mode can accept new remote package content after detecting that the downloaded tarball does not |
| CVE-2026-50574 | Analyzed | 未確認 | CWE-74 | yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), yt- |
| CVE-2026-50589 | Modified | 未確認 | CWE-502, CWE-770 | In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service cra |
| CVE-2026-50590 | Awaiting Analysis | 未確認 | CWE-732 | In Mimecast Incydr before 2.6.0, arbitrary file access can occur. |
| CVE-2026-50591 | Deferred | 未確認 | CWE-79 | In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences. |
| CVE-2026-50592 | Deferred | 未確認 | CWE-79 | In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view). |
| CVE-2026-50593 | Awaiting Analysis | 未確認 | CWE-191 | Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map |
| CVE-2026-50623 | Modified | 未確認 | CWE-287 | An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw' keyword in the security context check, the introspecti |
| CVE-2026-50627 | Modified | 未確認 | CWE-289, CWE-303 | The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be |
| CVE-2026-50628 | Modified | 未確認 | CWE-20, CWE-358 | A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this sec |
| CVE-2026-50629 | Modified | 未確認 | CWE-93 | The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker |
| CVE-2026-50630 | Modified | 未確認 | CWE-113 | A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constructing the WWW-Authenticate response header, the 'realm' parameter is concatenated without |
| CVE-2026-50631 | Modified | 未確認 | CWE-367 | A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Refresh Token to bypass single-use semantics and generate multiple valid Access Tokens, when |
| CVE-2026-50632 | Modified | 未確認 | CWE-20, CWE-502 | A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache CXF has been identified, which can allow code execution cap |
| CVE-2026-50633 | Modified | 未確認 | CWE-20, CWE-502 | A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployme |
| CVE-2026-50634 | Modified | 未確認 | CWE-347 | A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypas |
| CVE-2026-50635 | Deferred | 未確認 | CWE-640 | LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this is |
| CVE-2026-50636 | Deferred | 未確認 | CWE-89 | The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into TokenDynamic::findUninvited(), which concatenates the values di |
| CVE-2026-50637 | Analyzed | 未確認 | CWE-150, CWE-93 | Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions) allow mutiple metrics, separated by ne |
| CVE-2026-50638 | Analyzed | 未確認 | CWE-150, CWE-93 | Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple met |
| CVE-2026-50639 | Analyzed | 未確認 | CWE-150, CWE-93 | Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metr |
| CVE-2026-5064 | Awaiting Analysis | 未確認 | CWE-427 | Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or denial |
| CVE-2026-50643 | Deferred | 未確認 | CWE-125 | 8cc is vulnerable to an Out‑of‑Bounds Read due to improper handling of #line directives and GNU linemarkers. The compiler accepts attacker-controlled filename and line number metad |
| CVE-2026-50645 | Modified | 未確認 | CWE-400 | There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead to uncontrolled resource consumption or |
| CVE-2026-50656 | Modified | 未確認 | CWE-59 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". |
| CVE-2026-5066 | Analyzed | 未確認 | CWE-787 | A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c). When the TLS session cache is en |
| CVE-2026-5067 | Analyzed | 未確認 | CWE-170, CWE-787 | A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header. The HTTP/1 header par |
| CVE-2026-5068 | Analyzed | 未確認 | CWE-787 | A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation (via |
| CVE-2026-50698 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input before generating HTML outpu |
| CVE-2026-50699 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attacker with write access to Auto Repeat can persist HTML/JavaScr |
| CVE-2026-50700 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.get_avatar fun |
| CVE-2026-50701 | Deferred | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the dashboard-view com |
| CVE-2026-50703 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Desk desktop icon ren |
| CVE-2026-50704 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the File View breadcrumb |
| CVE-2026-50705 | Deferred | 未確認 | CWE-79 | A Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of untrusted input in the Form Dashboard headline renderer. |
| CVE-2026-50708 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the MultiSelectDialog com |
| CVE-2026-50709 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Notifications > Event |
| CVE-2026-50710 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation of user-controlled data in the Number Card component. |
| CVE-2026-50711 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Number Card component |
| CVE-2026-50712 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.ui.Tree compon |
| CVE-2026-5073 | Deferred | 未確認 | CWE-89 | The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and inclu |
| CVE-2026-50733 | Deferred | 未確認 | CWE-95 | Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval(), allowing arbitrary JavaScript execution. The flaw affects eve |
| CVE-2026-50734 | Analyzed | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All. An unauthenticated network attacker can cause a broker D |
| CVE-2026-50739 | Analyzed | 未確認 | CWE-284 | A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers through the `tracker-campai |
| CVE-2026-5074 | Deferred | 未確認 | CWE-89 | The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and inc |
| CVE-2026-50740 | Analyzed | 未確認 | CWE-79 | A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could exploit the refresh param |
| CVE-2026-50741 | Analyzed | 未確認 | CWE-94 | Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise |
| CVE-2026-50742 | Analyzed | 未確認 | CWE-79 | A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names bein |
| CVE-2026-50744 | Analyzed | 未確認 | CWE-284 | A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and a |
| CVE-2026-50745 | Analyzed | 未確認 | CWE-79 | A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the outpu |
| CVE-2026-50750 | Analyzed | 未確認 | CWE-400 | Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an unauthenticated attacke |
| CVE-2026-50751 | Analyzed | 掲載 | CWE-287 | A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentica |
| CVE-2026-50752 | Awaiting Analysis | 未確認 | CWE-295 | A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate va |
| CVE-2026-5076 | Deferred | 未確認 | CWE-287 | The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of t |
| CVE-2026-50765 | Modified | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 through 25.11 versions allow an authenticat |
| CVE-2026-50766 | Modified | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker wit |
| CVE-2026-50767 | Modified | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote atta |
| CVE-2026-5078 | Analyzed | 未確認 | CWE-117 | Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to the log stream without neutralizi |
| CVE-2026-5079 | Analyzed | 未確認 | CWE-400 | Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data. The append-field dependenc |
| CVE-2026-50869 | Deferred | 未確認 | CWE-22 | An issue in the api/plugin.php component of Bludit v3.19.0 allows attackers to execute a directory traversal via supplying a crafted request. |
| CVE-2026-50870 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in the configuration endpoint of Ben Busby whoogle-search v1.2.3 allows attackers to obtain sensitive information via a crafted GET request. |
| CVE-2026-50871 | Deferred | 未確認 | CWE-94 | An OS command injection vulnerability in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute arbitrary commands via |
| CVE-2026-50872 | Deferred | 未確認 | CWE-94 | An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a |
| CVE-2026-50873 | Deferred | 未確認 | CWE-434 | An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file. |
| CVE-2026-50874 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in the /manage/features/media component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute arbitrary commands via supplying a c |
| CVE-2026-50875 | Deferred | 未確認 | CWE-284 | Incorrect access control in the /{form}/webhooks/{webhook} endpoint of Deck9 Input v2.0.1 allows authenticated attackers to arbitrarily modify or delete another tenant's webhook vi |
| CVE-2026-50876 | Deferred | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in Deck9 Input v2.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. |
| CVE-2026-50877 | Deferred | 未確認 | CWE-22 | An issue in Zhoros SuperBin v1.0.0 allows attackers to execute a directory traversal via supplying files with names containing traversal characters. |
| CVE-2026-50878 | Deferred | 未確認 | CWE-400 | An issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to cause a Denial of Service (DoS) via a crafted request. |
| CVE-2026-50879 | Deferred | 未確認 | CWE-400 | An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
| CVE-2026-50880 | Deferred | 未確認 | CWE-94 | An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request. |
| CVE-2026-50881 | Deferred | 未確認 | CWE-284 | Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, |
| CVE-2026-50882 | Deferred | 未確認 | CWE-400 | An issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
| CVE-2026-50883 | Deferred | 未確認 | CWE-79 | An HTML injection vulnerability in the /src/highlight.rs component of matze wastebin v3.4.1 allows attackers to execute arbitrary scripts via a crafted payload. |
| CVE-2026-50884 | Deferred | 未確認 | CWE-284 | Incorrect access control in statping-ng v0.93.0 allows attackers to escalate privileges to Administrator and access sensitive components. |
| CVE-2026-50885 | Deferred | 未確認 | CWE-284 | Incorrect access control in the share-based read endpoints of Sismics Docs (Teedy) v1.11 allow unauthorized attackers to access sensitive endpoints via a crafted request. |
| CVE-2026-50886 | Deferred | 未確認 | CWE-284 | Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request. |
| CVE-2026-50887 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted long |
| CVE-2026-50888 | Deferred | 未確認 | CWE-918 | An authenticated Server-Side Request Forgery (SSRF) in the custom scraper subsystem component of Benjamin Jonard Koillection v1.8.0 allows attackers to scan internal resources via |
| CVE-2026-50889 | Analyzed | 未確認 | CWE-400 | An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (DoS) via sending a crafted refresh-token header. |
| CVE-2026-50890 | Deferred | 未確認 | CWE-89 | Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /stockreports/spendings. This vulnerability allows attackers to |
| CVE-2026-50891 | Deferred | 未確認 | CWE-284 | Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request. |
| CVE-2026-50892 | Awaiting Analysis | 未確認 | CWE-284 | Incorrect access control in the "Let's Encrypt" certificate download endpoint of Nginx Proxy Manager v2.14.0 allows authenticated attackers to obtain the TLS private key material v |
| CVE-2026-51218 | Deferred | 未確認 | CWE-122 | A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a Denial of Service (DoS) via a crafted pac |
| CVE-2026-51219 | Deferred | 未確認 | CWE-122 | A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted |
| CVE-2026-51221 | Deferred | 未確認 | CWE-284 | A buffer overflow in the Get_Attribute_List function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service (DoS) via supplying a crafted Common Packet |
| CVE-2026-5139 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to enforce administrator authorization on the {{setDefaultInstance}} call within |
| CVE-2026-5149 | Deferred | 未確認 | CWE-863 | The RTMKit plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.0.7 This is due to the get_submission_content AJAX endpoint lacking |
| CVE-2026-51843 | Analyzed | 未確認 | CWE-121 | Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter. |
| CVE-2026-51844 | Analyzed | 未確認 | CWE-121 | Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter. |
| CVE-2026-51845 | Analyzed | 未確認 | CWE-121 | Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter. |
| CVE-2026-51846 | Analyzed | 未確認 | CWE-121 | In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution. |
| CVE-2026-5191 | Deferred | 未確認 | CWE-79 | The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to, and includi |
| CVE-2026-52193 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_447CAC component |
| CVE-2026-52195 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_472f08 component |
| CVE-2026-52196 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_416f28 component |
| CVE-2026-52197 | Deferred | 未確認 | CWE-400 | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_44af70 component |
| CVE-2026-52198 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_425994 component |
| CVE-2026-5228 | Deferred | 未確認 | CWE-284, CWE-862 | Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue |
| CVE-2026-5230 | Deferred | 未確認 | CWE-284, CWE-862 | Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Security Levels. This iss |
| CVE-2026-5233 | Deferred | 未確認 | CWE-799 | Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Library allows Flooding. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250 |
| CVE-2026-5241 | Modified | 未確認 | CWE-829 | A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model |
| CVE-2026-5242 | Deferred | 未確認 | CWE-1236 | Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection. This issue affects Pizzy Library: from 1.0.0.26 |
| CVE-2026-52673 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute arbitrary code via the getDimensionsValues component |
| CVE-2026-52690 | Deferred | 未確認 | CWE-290 | Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail. |
| CVE-2026-52692 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. |
| CVE-2026-52693 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions. |
| CVE-2026-52694 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions. |
| CVE-2026-52695 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions. |
| CVE-2026-52696 | Deferred | 未確認 | CWE-1258 | Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions. |
| CVE-2026-52697 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions. |
| CVE-2026-52698 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget <= 4.2.3 versions. |
| CVE-2026-52699 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions. |
| CVE-2026-52700 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions. |
| CVE-2026-52701 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in User Registration <= 5.2.2 versions. |
| CVE-2026-52702 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions. |
| CVE-2026-52703 | Deferred | 未確認 | CWE-35 | Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. |
| CVE-2026-52704 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion. This issue affects WooCommerce |
| CVE-2026-52705 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions. |
| CVE-2026-52706 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions. |
| CVE-2026-52707 | Deferred | 未確認 | CWE-35 | Unauthenticated Local File Inclusion in Kastell <= 2.0 versions. |
| CVE-2026-52711 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions. |
| CVE-2026-52712 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions. |
| CVE-2026-52714 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO <= 12.4.16 versions. |
| CVE-2026-52715 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions. |
| CVE-2026-52716 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in WorkScout-Core <= 1.7.11 versions. |
| CVE-2026-52718 | Awaiting Analysis | 未確認 | CWE-617 | A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad. The gst_av1_parser_parse_tile_list_obu() function passes a byte count to a bit-reade |
| CVE-2026-52719 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validat |
| CVE-2026-52720 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than individual dimensions, allo |
| CVE-2026-52721 | Awaiting Analysis | 未確認 | CWE-125 | Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header pa |
| CVE-2026-52722 | Awaiting Analysis | 未確認 | CWE-190 | A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmeti |
| CVE-2026-52725 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2 |
| CVE-2026-52726 | Deferred | 未確認 | CWE-22 | Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to version 1.2.5, `dulwich.porcelain.submodule_update`, and by e |
| CVE-2026-52750 | Analyzed | 未確認 | CWE-88 | Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arb |
| CVE-2026-52751 | Analyzed | 未確認 | CWE-502 | Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers c |
| CVE-2026-52752 | Analyzed | 未確認 | CWE-22 | Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious exte |
| CVE-2026-52753 | Analyzed | 未確認 | CWE-789 | Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. Attackers can craft maliciou |
| CVE-2026-52754 | Analyzed | 未確認 | CWE-347 | Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-signed certificate to impersonate |
| CVE-2026-52755 | Analyzed | 未確認 | CWE-22 | Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers |
| CVE-2026-52756 | Analyzed | 未確認 | CWE-22 | Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and passes client-supplied namespace strings directly to f |
| CVE-2026-52757 | Analyzed | 未確認 | CWE-416 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vuln |
| CVE-2026-52758 | Analyzed | 未確認 | CWE-89 | Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queries without escaping or parameterization. |
| CVE-2026-52759 | Analyzed | 未確認 | CWE-789 | Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. An attacker can supply a |
| CVE-2026-52760 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web cons |
| CVE-2026-52778 | Deferred | 未確認 | CWE-1333, CWE-94 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, an unsafe execution vulnerability exists in the Bazar form field calculator (CalcField.php) of YesWiki. The applica |
| CVE-2026-52779 | Deferred | 未確認 | CWE-639, CWE-863 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, a cross-project IDOR / authorization context confusion in the Calendar and Team Plann |
| CVE-2026-52780 | Deferred | 未確認 | CWE-20 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is fix |
| CVE-2026-52781 | Deferred | 未確認 | CWE-79 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the HTML sanitizer grants <macro> elements unrestricted data-* attributes via :data w |
| CVE-2026-52782 | Deferred | 未確認 | CWE-639 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through /projects/<A>/settings/project_storages/<A_ps_id> via PATCH |
| CVE-2026-52783 | Deferred | 未確認 | CWE-313 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth access_to |
| CVE-2026-52784 | Deferred | 未確認 | CWE-352 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a CSRF on TARGET through /users/:id via POST parameter "user[admin]". This v |
| CVE-2026-52785 | Deferred | 未確認 | CWE-89 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline comparison |
| CVE-2026-52794 | Analyzed | 未確認 | CWE-1333 | Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Sentry's event ingesti |
| CVE-2026-52795 | Deferred | 未確認 | CWE-863 | Gogs is an open source self-hosted Git service. In 0.14.3 and earlier, any authenticated user can watch a private repository they have no access to, because the access check in the |
| CVE-2026-52796 | Deferred | 未確認 | CWE-1336 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index pattern can cause a panic when rendering, resulting in denial of service. In internal |
| CVE-2026-52797 | Deferred | 未確認 | CWE-22 | Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder can dictate the value which is passed to the git diff command which, together wi |
| CVE-2026-52798 | Deferred | 未確認 | CWE-79 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, although .ipynb previews are sanitized on the server side via /-/api/sanitize_ipynb, the inserted content is re-ren |
| CVE-2026-52799 | Deferred | 未確認 | CWE-639, CWE-862 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, GET /attachments/:uuid returns the raw attachment file without verifying whether the requester has view permission |
| CVE-2026-52800 | Deferred | 未確認 | CWE-352 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a victim who is a |
| CVE-2026-52801 | Deferred | 未確認 | CWE-20 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functionality provide an alternative way from the well protected New Migration functionali |
| CVE-2026-52802 | Deferred | 未確認 | CWE-601 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, an open redirect vulnerability exists in Gogs where attacker-controlled redirect_to parameters can bypass validatio |
| CVE-2026-52804 | Deferred | 未確認 | CWE-193 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collaborator can escalate their privileges to owner-level access by exploiting an off-by-one err |
| CVE-2026-52805 | Deferred | 未確認 | CWE-918 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Server-Side Request Forgery (SSRF) vulnerability exists in the repository migration functionality. The applicatio |
| CVE-2026-52806 | Deferred | 未確認 | CWE-77 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request wit |
| CVE-2026-52807 | Deferred | 未確認 | CWE-79 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, in new_form.tmpl, milestone names are rendered with Go's default auto-escaping ({{.Name}}), which converts < to < |
| CVE-2026-52808 | Deferred | 未確認 | CWE-269, CWE-863 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, three API endpoints — PATCH /api/v1/repos/:owner/:repo/issue-tracker, PATCH /api/v1/repos/:owner/:repo/wiki, and PO |
| CVE-2026-52809 | Deferred | 未確認 | CWE-324, CWE-613 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives (the account-activation lifetime), not conf.A |
| CVE-2026-52810 | Deferred | 未確認 | CWE-284 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST …/git-receive-pack using the client-supplied service query string (so ?service=git-u |
| CVE-2026-52811 | Deferred | 未確認 | CWE-22, CWE-59, CWE-61 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only on the leaf of the upload target (osx.IsSymlink(targetPath)) |
| CVE-2026-52812 | Deferred | 未確認 | CWE-345, CWE-639, CWE-862 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone (<LFS-root>/<oid[0]>/<oid[1]>/<oid>) but per-repo authorization l |
| CVE-2026-52813 | Deferred | 未確認 | CWE-23 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are |
| CVE-2026-52814 | Deferred | 未確認 | CWE-400 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric Denial of Service (DoS) attack. The |
| CVE-2026-52815 | Deferred | 未確認 | CWE-200 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint at i |
| CVE-2026-52816 | Deferred | 未確認 | CWE-80 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) sanitizer endpoint at POST /-/api/sanitize_ipynb allows arbitrary data: URIs without p |
| CVE-2026-52844 | Analyzed | 未確認 | CWE-22, CWE-284 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/*, but file_server l |
| CVE-2026-52845 | Modified | 未確認 | CWE-287, CWE-290, CWE-444 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the exact client-supplied identity header before copying the tru |
| CVE-2026-52846 | Analyzed | 未確認 | CWE-116 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certa |
| CVE-2026-52858 | Analyzed | 未確認 | CWE-829, CWE-94, CWE-95 | Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled ( |
| CVE-2026-52859 | Analyzed | 未確認 | CWE-125 | Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible terminal screen into the scrollback |
| CVE-2026-52860 | Modified | 未確認 | CWE-94 | Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buff |
| CVE-2026-52866 | Awaiting Analysis | 未確認 | CWE-862 | An attacker within BLE communication range can monopolize the device's only available BLE connection slot, preventing legitimate users or applications from establishing a connect |
| CVE-2026-52868 | Deferred | 未確認 | CWE-22 | An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or |
| CVE-2026-52884 | Analyzed | 未確認 | CWE-42 | Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the path before checking. It uses a prefix-based check (PathIsPref |
| CVE-2026-52885 | Analyzed | 未確認 | CWE-367 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at the moment a user command fires (Time-of-C |
| CVE-2026-52902 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML f |
| CVE-2026-52904 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_remove_conflicting_pci_devices() f |
| CVE-2026-52905 | Analyzed | 未確認 | CWE-1284 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_region_sz on damon_start() Commit d8f867fa0825 ("mm/damon: add da |
| CVE-2026-52906 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb ("9p: convert to the new mo | |
| CVE-2026-52907 | Analyzed | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change these comparisons from > vs >= to avoid accessing one eleme |
| CVE-2026-52908 | Modified | 未確認 | CWE-285 | In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible If IB_MR_REREG_ACCESS changes from RO to RW then |
| CVE-2026-52909 | Modified | 未確認 | CWE-863 | In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported that vti6_init_net() d |
| CVE-2026-52910 | Modified | 未確認 | CWE-125, CWE-364, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0] T |
| CVE-2026-52911 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessions only When the binding SESSION_SETUP sets conn->binding = | |
| CVE-2026-52912 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from the ingress p |
| CVE-2026-52913 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: stop OGMv2 on disabled interface When a batadv_hard_iface is disabled, its mesh_iface pointer i |
| CVE-2026-52914 | Modified | 未確認 | CWE-190, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length accounting batman-adv keeps a running payload length for queued fra |
| CVE-2026-52915 | Modified | 未確認 | CWE-125, CWE-129 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_hbh: reject oversized option lists struct ip6t_opts stores at most IP6T_OPTS_OPTSNR option des |
| CVE-2026-52916 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: disallow unicast fragment in fragment batadv_frag_skb_buffer() is called by batadv_batman_sk | |
| CVE-2026-52917 | Modified | 未確認 | CWE-125, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dump_one path The SCTP exact sock_diag lookup can hold a transport re |
| CVE-2026-52918 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize accept_q access bt_sock_poll() walks the accept queue without synchronization, while chil |
| CVE-2026-52919 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix tp_meter counter underflow during shutdown batadv_tp_sender_shutdown() unconditionally decreme |
| CVE-2026-52920 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_policy: fix strict mode inbound policy matching match_policy_in() walks sec_path entries from th |
| CVE-2026-52921 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash:* range iteration at end The following hash set variants: hash:ip,mark hash:ip,po |
| CVE-2026-52922 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error batadv_dat_forward_data() calls pskb_copy_for_clone() to dupl |
| CVE-2026-52923 | Modified | 未確認 | CWE-20, CWE-401, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next Sy |
| CVE-2026-52924 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctp_stream_update() is only invoked when the association i |
| CVE-2026-52925 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: vrf: Fix a potential NPD when removing a port from a VRF RCU readers that identified a net device as a VRF por |
| CVE-2026-52926 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: clear current gateway during teardown batadv_gw_node_free() removes the gateway list entries durin | |
| CVE-2026-52927 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix OOB read in compat_mtw_from_user Luxiao Xu says: The function compat_mtw_from_user( |
| CVE-2026-52928 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports whether the receive queue is at the urgent | |
| CVE-2026-52929 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADD_OUT_STREAMS is denied, SCTP only shrinks the qu |
| CVE-2026-52930 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shm_nattch updates shm_destroy_orphaned() walks the shm idr under shm_i | |
| CVE-2026-52931 | Modified | 未確認 | CWE-457 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_recv_ack() and batadv_tp_stop() are only valid |
| CVE-2026-52932 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so th | |
| CVE-2026-52933 | Modified | 未確認 | CWE-190, CWE-835 | In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_ownership() uses a signed comparis |
| CVE-2026-52934 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tvlv: reject oversized TVLV packets batadv_tvlv_container_ogm_append() builds a TVLV packet sectio | |
| CVE-2026-52935 | Modified | 未確認 | CWE-362, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: do not reuse an in-progress partial send espintcp keeps a single in-flight transmit in ctx->pa |
| CVE-2026-52936 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlock with mutex jent_kcapi_random() serializes the shared jitter | |
| CVE-2026-52937 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR In the SIOCGIFHWADDR path, tap_ioctl() copies 16 bytes o |
| CVE-2026-52938 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths bpf_selem_unlink_nofail() sets SDATA( |
| CVE-2026-52939 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion rds_ib_xmit_atomic() always p |
| CVE-2026-52940 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tun: zero the whole vnet header in tun_put_user() tun_put_user() declares an on-stack struct virtio_net_hdr_v1 | |
| CVE-2026-52941 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint The smc_msg_event tracepoint class, shared |
| CVE-2026-52942 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: validate MAC header was set before dumping it The fallback path of dump_mac_header() guards |
| CVE-2026-52943 | Modified | 未確認 | CWE-416, CWE-911 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_inside_header() and pskb_carve_in |
| CVE-2026-52944 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE FSCTL_SET_SPARSE in fsctl | |
| CVE-2026-52945 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c |
| CVE-2026-52946 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling A SOFTIRQ-safe to SOFTIRQ-unsafe lock order deadlo |
| CVE-2026-52947 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove In qrtr_port_remove(), the socket ref |
| CVE-2026-52948 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl While fuzzing with Syzkaller, a persistent `schedule_t |
| CVE-2026-52949 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure Apply the same fix as b2ed01e7ad ("drm/ttm: F | |
| CVE-2026-52950 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: fix UAF with retry loop Retry doesn't work here, since bo will be freed on error, leading to U |
| CVE-2026-52951 | Modified | 未確認 | CWE-416, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races There look to be some nasty races here when triggering the inval |
| CVE-2026-52952 | Analyzed | 未確認 | CWE-617, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset In __iommu_group_set_domain_internal(), c |
| CVE-2026-52953 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers when kill QEMU process: Oops: general p |
| CVE-2026-52954 | Modified | 未確認 | CWE-20, CWE-617 | In the Linux kernel, the following vulnerability has been resolved: libceph: handle rbtree insertion error in decode_choose_args() A message of type CEPH_MSG_OSD_MAP contains an |
| CVE-2026-52955 | Modified | 未確認 | CWE-125, CWE-131 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crush_decode() A message of type CEPH_MSG_OSD_MAP containing a |
| CVE-2026-52956 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() In __ceph_x_decrypt(), a part of the buffer |
| CVE-2026-52957 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decode_choose_args() A message of type CEPH_MSG_OSD_MAP contains an O |
| CVE-2026-52958 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmap_decode() When decoding osd_state and osd_weight from an |
| CVE-2026-52959 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Do not use host-controlled page order in cleanup path When issuing an extended guest request | |
| CVE-2026-52960 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ceph: put folios not suitable for writeback The batch holds references to the folios (see `filemap_get_folios` |
| CVE-2026-52961 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size The generic/642 test-case can reproduce |
| CVE-2026-52962 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc |
| CVE-2026-52963 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans snd_usbmidi_get_ms_info() validates the internal MIDIStr | |
| CVE-2026-52964 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans The USB MIDI 2.0 endpoint parser has the same descri | |
| CVE-2026-52965 | Modified | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure When ttm_tt_swapout() fails, the current co |
| CVE-2026-52966 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm: Replace old pointer to new idr Commit 5e28b7b94408 introduced a logical error by failing to replace the n | |
| CVE-2026-52967 | Modified | 未確認 | CWE-125, CWE-190 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob read in symlink_data() On 32-bit architectures, the infinite lo |
| CVE-2026-52968 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic kvm_s390_pci_aif_enable(), kv |
| CVE-2026-52969 | Analyzed | 未確認 | CWE-129, CWE-190 | In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() kvm_reset_dirty_gfn() guards the gfn range with if (!mem |
| CVE-2026-52970 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect_obj_eval() allocates an expectation and ma | |
| CVE-2026-52971 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Fix potential use-after-free in get_timestamp Move the phc->active check and resp pointer assig |
| CVE-2026-52972 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the T |
| CVE-2026-52973 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private default hash alloc Currently need_futex_hash_allocate_default |
| CVE-2026-52974 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: tls: fix strparser anchor skb leak on offload RX setup failure When tls_set_device_offload_rx() fails at |
| CVE-2026-52975 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: bonding: 3ad: implement proper RCU rules for port->aggregator syzbot found a data-race in bond_3ad_get_active_ |
| CVE-2026-52976 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() Two error handling issues exist in xe_exec_queue_cre |
| CVE-2026-52977 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup During wait-requeue-pi (task A) and requeue- | |
| CVE-2026-52978 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set and key-rotate The dev-set and key-rotate netlink operations mo | |
| CVE-2026-52979 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc psp_assoc_device_get_locked() obtains a psp_dev refe |
| CVE-2026-52980 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing forked entities A yield-triggered crash can happen when a new |
| CVE-2026-52981 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_xmit always releases the skb, except when no neighbour table is |
| CVE-2026-52982 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() syzbot reported a KASAN slab-use-after-free read |
| CVE-2026-52983 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a possible BQL imbalance in airoha_dev_xmit(), where inflight pa | |
| CVE-2026-52984 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() | |
| CVE-2026-52985 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from |
| CVE-2026-52986 | Modified | 未確認 | CWE-125, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsing in epaddr_len(), ct_sip_pars |
| CVE-2026-52987 | Analyzed | 未確認 | CWE-1341 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_addition is true, amdgpu_userq_vm_validate |
| CVE-2026-52988 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Publish new hooks in the list into |
| CVE-2026-52989 | Modified | 未確認 | CWE-390, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Currently, when nvmet_tcp_build_pdu_iov |
| CVE-2026-52990 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotify_recalc_mask() fsnotify_recalc_mask() fails to handle the return | |
| CVE-2026-52991 | Modified | 未確認 | CWE-362, CWE-367 | In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressure write A potential race condition exists between pressure |
| CVE-2026-52992 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfs_validate_bblk() Reject ADFS disc records with a zero zone count during boot b |
| CVE-2026-52993 | Modified | 未確認 | CWE-415, CWE-763 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is valida |
| CVE-2026-52994 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting virtio_transport_init_zcopy_skb() uses iter->count as t | |
| CVE-2026-52995 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handing it to visitors rds_for_each_conn_info() and rds_walk_conn_pa | |
| CVE-2026-52996 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open ksmbd_lookup_fd_cguid() returns a ksmbd_f |
| CVE-2026-52997 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() Fix dualpi2_change() to correctly e |
| CVE-2026-52998 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check The nf_osf_ttl() function accessed skb-> |
| CVE-2026-52999 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching In nf_osf_match(), the nf_osf_hdr_ctx stru |
| CVE-2026-53000 | Modified | 未確認 | CWE-763 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Florian Westphal says: "Historically this is not an issue, even |
| CVE-2026-53001 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of: commit ab4f21e6fb1 | |
| CVE-2026-53002 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be larg |
| CVE-2026-53003 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT RECOMMENDED for |
| CVE-2026-53004 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks sctp_getsockopt_peer_auth_chunks() checks |
| CVE-2026-53005 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Drop all SCM attributes for SOCKMAP. SOCKMAP can hide inflight fd from AF_UNIX GC. When a socket in |
| CVE-2026-53006 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->he |
| CVE-2026-53007 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ice: fix potential NULL pointer deref in error path of ice_set_ringparam() ice_set_ringparam nullifies tstamp_ |
| CVE-2026-53008 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ice: fix race condition in TX timestamp ring cleanup Fix a race condition between ice_free_tx_tstamp_ring() an |
| CVE-2026-53009 | Modified | 未確認 | CWE-415, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ice_tso() or ice_tx_csum() fail, the error path in ice_xmit_frame_ring() |
| CVE-2026-53010 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, the call to ksmbd_put_durable_fd |
| CVE-2026-53011 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch In advance_sched(), when should_ch |
| CVE-2026-53012 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic [1] [2]. When an IPv6 nexthop is rep |
| CVE-2026-53013 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF macvlan_get_size() does not acc | |
| CVE-2026-53014 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir In tcf_blockcast_redi | |
| CVE-2026-53015 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: unify lcn as u64 for 32-bit platforms As sashiko reported [1], `lcn` was typed as `unsigned long` (or ` | |
| CVE-2026-53016 | Modified | 未確認 | CWE-787, CWE-805 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the drive |
| CVE-2026-53017 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect use of nat_entry flag Data loss can occur when fsync is performed on a | |
| CVE-2026-53018 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already updated pages during GC We found the following issue during fuzz testing: page: r | |
| CVE-2026-53019 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() Fix inverted condition that skips frequ | |
| CVE-2026-53020 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: um: Fix potential race condition in TLB sync During the TLB sync, we need to traverse and modify the page tabl |
| CVE-2026-53021 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer overflow in UNMAP bounds check sbc_execute_unmap() checks LBA + range does not |
| CVE-2026-53022 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populate_enum_data() aggregates firmware-p | |
| CVE-2026-53023 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: terminate the cached volume label after UTF-8 conversion ntfs_fill_super() loads the on-disk volume | |
| CVE-2026-53024 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free if write is called after disconnect If a user writes to the chardev after dis |
| CVE-2026-53025 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundle is discon |
| CVE-2026-53026 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg In nfsd4_add_rdaccess_to_wrdeleg, if f | |
| CVE-2026-53027 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() When a compressed or sparse attribute | |
| CVE-2026-53028 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: Fix error pointer dereference The variable tps->partner is checked for an error pointer and then i |
| CVE-2026-53029 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent uninitialized lcn caused by zero len syzbot reported a uninit-value in ntfs_iomap_begin [1]. |
| CVE-2026-53030 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers() The xfer structure allocated by renesas_i3c_a |
| CVE-2026-53031 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() arena_alloc_pages() accepts a plain int node_id and forwards it t |
| CVE-2026-53032 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() is |
| CVE-2026-53033 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter When a BPF iterator program updates a sockmap, there is a race |
| CVE-2026-53034 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix null-ptr-deref in proto update unix_stream_connect() sets sk_state (`WRITE_ONCE(sk-> |
| CVE-2026-53035 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix iter deadlock bpf_iter_unix_seq_show() may deadlock when lock_sock_fast() takes the |
| CVE-2026-53036 | Analyzed | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in check_imm signed range check check_imm(bits, imm) is used in the arm64 BPF JIT t |
| CVE-2026-53037 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hid_post_reset() You can build a USB device that includes a HID component and a s |
| CVE-2026-53038 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ima_fs: Correctly create securityfs files for unsupported hash algos ima_tpm_chip->allocated_banks[i].crypto_i |
| CVE-2026-53039 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate group add input before caching [BUG] OCFS2_IOC_GROUP_ADD can trigger a BUG_ON in ocfs2_set_new |
| CVE-2026-53040 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate bg_bits during freefrag scan [BUG] A crafted filesystem can trigger an out-of-bounds bitmap wa |
| CVE-2026-53041 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling when the buffer is full [BUG] If an OCFS2 inode has both inline and block-based |
| CVE-2026-53042 | Analyzed | 未確認 | CWE-824 | In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal CXL is linked before fwctl |
| CVE-2026-53043 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch series "ocfs2/dlm: fix two bugs in dlm_match_re |
| CVE-2026-53044 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables Fix incorrect ARRAY_SIZE usage in fabric look |
| CVE-2026-53045 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The code checking whether the specified memory timing enables DLL i | |
| CVE-2026-53046 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine ksmbd_crypt_message() sets a NULL comple |
| CVE-2026-53047 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc() call for cap_info->phys in | |
| CVE-2026-53048 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: gfs2: prevent NULL pointer dereference during unmount When flushing out outstanding glock work during an unmou |
| CVE-2026-53049 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log locking Function gfs2_logd() calls the log flushing functions gfs2_ail1_start(), gf |
| CVE-2026-5305 | Deferred | 未確認 | The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin before 0.3.12 does not properly handle email replacement, which could allow unauthe | |
| CVE-2026-53050 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of dquot_scan_active() with quota deactivation dquot_scan_active() can race with quota deactiv |
| CVE-2026-53051 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on When PERST# is deasserted twice (asse | |
| CVE-2026-53052 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: topology: check widget type before accessing data Check widget type before accessing the pr | |
| CVE-2026-53053 | Modified | 未確認 | CWE-681 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original device's devid Currently clone_alias() assumes first argument |
| CVE-2026-53054 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix VM_BIND UNMAP locking Wrong argument meant that the objs involved in UNMAP ops were not always ge |
| CVE-2026-53055 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec2 - prevent req used-after-free for sec During packet transmission, if the system is unde |
| CVE-2026-53056 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: fix mismatch between power and frequency During DPU runtime suspend, calling dev_pm_opp_set_rate( | |
| CVE-2026-53057 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Add IOTINVAL after updating DDT/PDT entries Add riscv_iommu_iodir_iotinval() to perform required | |
| CVE-2026-53058 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() In case if we get e |
| CVE-2026-53059 | Modified | 未確認 | CWE-190, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_con |
| CVE-2026-53060 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: dm cache metadata: fix memory leak on metadata abort retry When failing to acquire the root_lock in dm_cache_m |
| CVE-2026-53061 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthrough mode switching As mentioned in commit 9b1cc9f251af ("dm ca | |
| CVE-2026-53062 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missing locks in invalidating cache blocks In passthrough mode, the policy invalidate |
| CVE-2026-53063 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidate_remove() function has incomplete logic for handlin | |
| CVE-2026-53064 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix null-deref with concurrent writes in passthrough mode In passthrough mode, when dm-cache starts |
| CVE-2026-53065 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: use managed regmap_field allocations The regmap_field objects allocated at player init are never fr |
| CVE-2026-53066 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: backend: fix error pointer dereference The function drm_atomic_get_plane_state() can return an erro |
| CVE-2026-53067 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc pci_epf_alloc_doorbell() stores the alloc |
| CVE-2026-53068 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in AFBC framebuffer size check The AFBC framebuffer size validation calculate |
| CVE-2026-53069 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master syzkaller reported a kernel panic in bon |
| CVE-2026-53070 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udp_tunnel_xmit_skb() udp_tunnel_xmit_skb() / udp_tunnel6_xmit_skb() are expec |
| CVE-2026-53071 | Modified | 未確認 | CWE-416, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_de |
| CVE-2026-53072 | Modified | 未確認 | CWE-362, CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER When protocol sets HCI_PROTO_DEFER, hci_ |
| CVE-2026-53073 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error When hci_register_dev() fails in hci_uart_register_de |
| CVE-2026-53074 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb bpf_prog_test_run_skb() calls eth_type_trans() fir | |
| CVE-2026-53075 | Modified | 未確認 | CWE-863 | In the Linux kernel, the following vulnerability has been resolved: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls /dev/ppp open is currently authorized against |
| CVE-2026-53076 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix OOB in pcpu_init_value An out-of-bounds read occurs when copying element from a BPF_MAP_TYPE_CGROUP_S |
| CVE-2026-53077 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB to the initial network namespace Prevent using RDS/IB in network namespaces ot | |
| CVE-2026-53078 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops When a BPF sock_ops program accesses ctx |
| CVE-2026-53079 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net_sched: fix skb memory leak in deferred qdisc drops When the network stack cleans up the deferred list via |
| CVE-2026-53080 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL dereference of "old" filters before change() Like pointed out by Sashiko [1], sinc |
| CVE-2026-53081 | Modified | 未確認 | CWE-386 | In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars When regsafe() compares two scalar register |
| CVE-2026-53082 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf sixpack_receive_buf() does not properly skip byt |
| CVE-2026-53083 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpf_fd_array_map_clear() Add a missing cond_resched() in bpf_fd_array_map_clear() loop. | |
| CVE-2026-53084 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: return VMA snapshot from task_vma iterator Holding the per-VMA lock across the BPF program body creates a | |
| CVE-2026-53085 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix mm lifecycle in open-coded task_vma iterator The open-coded task_vma iterator reads task->mm lockless |
| CVE-2026-53086 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix racing timeout handler The bcmgenet_timeout handler tries to take down all tx queues when a |
| CVE-2026-53087 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix leaking free_bds While reclaiming the tx queue we fast forward the write pointer to drop an |
| CVE-2026-53088 | Modified | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr points to the next open tx_cb. We want to ret |
| CVE-2026-53089 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in offloaded map/prog info fill When querying info for an offloaded BPF map or program |
| CVE-2026-5309 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have all |
| CVE-2026-53090 | Modified | 未確認 | CWE-253 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure path analysis in subprogs Usage of ld_{abs,ind} instructions got extended into s |
| CVE-2026-53091 | Modified | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdisc_pkt_len_segs_init() Most ndo_start_xmit() methods expects headers of gso packets to |
| CVE-2026-53092 | Modified | 未確認 | CWE-393 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider the case of rX += rX where src_reg and dst |
| CVE-2026-53093 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix error pointer dereference The function brcmf_chip_add_core() can return an error pointer a |
| CVE-2026-53094 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stale offload->prog pointer after constant blinding When a dev-bound-only BPF program (BPF_F_XDP_DEV_ |
| CVE-2026-53095 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix abuse of kprobe_write_ctx via freplace uprobe programs are allowed to modify struct pt_regs. Since t | |
| CVE-2026-53096 | Modified | 未確認 | CWE-362, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path The DEVMAP_HASH branch in dev_map_redirect_mu |
| CVE-2026-53097 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() When the mt7996 pci chip is detaching, t |
| CVE-2026-53098 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() When the mt7915 pci chip is detaching, t |
| CVE-2026-53099 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI This was renamed in commit 23ef9d439769 ("kcfi: Rename CONFIG_CFI_C | |
| CVE-2026-53100 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix deadlock in remain-on-channel mt76_remain_on_channel() and mt76_roc_complete() call mt76_set_c |
| CVE-2026-53101 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync roc_abort_sync() can deadlock with roc_wor |
| CVE-2026-53102 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() mt76_connac_mcu_alloc_sta_req() allocates an |
| CVE-2026-53103 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync roc_abort_sync() can deadlock with roc_wor |
| CVE-2026-53104 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak destroying device All MT76 rx queues have an associated page_pool even if the queu |
| CVE-2026-53105 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi Check for a NULL `vif` before access |
| CVE-2026-53106 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting local storage in NMI Currently, local storage may deadlock when deferring freeing s |
| CVE-2026-53107 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: don't kill URBs in interrupt context Serialization for the TX path was enforced by calling usb | |
| CVE-2026-53108 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migration entries The following race is possible with migration swap entr |
| CVE-2026-53109 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy powerpc uses pt_frag_refcount as a reference coun |
| CVE-2026-53110 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend uns |
| CVE-2026-53111 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap The bpf_lwt_xmit_push_encap h |
| CVE-2026-53112 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet The irq_prepare_b |
| CVE-2026-53113 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leaks in beacon template setup The functions ath11k_mac_setup_bcn_tmpl_ema() and ath1 |
| CVE-2026-53114 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler Calling perf_allow_kernel() from the | |
| CVE-2026-53115 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the |
| CVE-2026-53116 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: s390/ap: use generic driver_override infrastructure When the AP masks are updated via apmask_store() or aqmask |
| CVE-2026-53117 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bu |
| CVE-2026-53118 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: vdpa: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' m |
| CVE-2026-53119 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infrastructure When a driver is probed through __driver_attach(), th |
| CVE-2026-53120 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: PCI: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' ma |
| CVE-2026-53121 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init() On failure to set the epp, the function amd_pstate_ep |
| CVE-2026-53122 | Modified | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit When using the flushoncomm |
| CVE-2026-53123 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiters before suspend During raid456 reshape, direct IO across the reshape position | |
| CVE-2026-53124 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: reset per-IO canceled flag on each fetch If a ublk server starts recovering devices but dies before issu | |
| CVE-2026-53125 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: md: fix array_state=clear sysfs deadlock When "clear" is written to array_state, md_attr_store() breaks sysfs |
| CVE-2026-53126 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() Add the missing put_disk() on the error | |
| CVE-2026-53127 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: block: fix zones_cond memory leak on zone revalidation error paths When blk_revalidate_disk_zones() fails afte |
| CVE-2026-53128 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbd_adm_dump_devices() Make drbd_adm_dump_devices() call rcu_read_lock() before rc | |
| CVE-2026-53129 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fs/mbcache: cancel shrink work before destroying the cache mb_cache_destroy() calls shrinker_free() and then f |
| CVE-2026-53130 | Analyzed | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START omfs_fill_super() rejects oversized s_sys_blocksiz |
| CVE-2026-53131 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`, `ha |
| CVE-2026-53132 | Modified | 未確認 | CWE-400, CWE-401 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unbounded skb queue virtio_transport_inc_rx_pkt() checks vvs->rx_bytes + len > vvs |
| CVE-2026-53133 | Modified | 未確認 | CWE-190, CWE-681 | In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes >= 4G When the iommu is used the linearization of the mapping can gi |
| CVE-2026-53134 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: fix stale stack leak via the OIFNAME register For NFT_FIB_RESULT_OIFNAME the destination r |
| CVE-2026-53135 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs [Why & How] dp_sdp_message_debugfs_write() |
| CVE-2026-53136 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size [Why & How] The VBIOS integrated info t |
| CVE-2026-53137 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size [Why & How] During HDCP 2.x repeater authenti |
| CVE-2026-53138 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Bound VBIOS record-chain walk loops [Why & How] All record-chain walk loops in bios_parser.c |
| CVE-2026-53139 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Skip CSD when it has zeroed workgroups A compute shader dispatch encodes its workgroup counts in the | |
| CVE-2026-53140 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups v3d_rewrite_csd_job_wg_counts_from_indirect() |
| CVE-2026-53141 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix global performance monitor reference counting In the SET_GLOBAL ioctl, v3d_perfmon_find() bumps t | |
| CVE-2026-53142 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/display: fix oops in suspend/shutdown without display The xe driver keeps track of whether to probe dis |
| CVE-2026-53143 | Modified | 未確認 | CWE-131, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 The v11 MQD manager incorrectly assi |
| CVE-2026-53144 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL dereference in get_queue_ids() When usr_queue_id_array is NULL and num_queues is non-zero |
| CVE-2026-53145 | Modified | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix change_handle ioctl, attempt 4 [airlied: just added some comments on how to reenable] On-l |
| CVE-2026-53146 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Limit XDomain response copy to actual frame size tb_xdomain_copy() copies req->response_size byte |
| CVE-2026-53147 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tb_xdp_handle_request() casts the received |
| CVE-2026-53148 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size tb_xdp_properties_request() derives the per-p |
| CVE-2026-53149 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size __tb_property_parse_dir() does not check that content_ |
| CVE-2026-53150 | Modified | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with l |
| CVE-2026-53151 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix modification of the received skbuff in rxr |
| CVE-2026-53152 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: mmc: dw_mmc-rockchip: Add missing private data for very old controllers The really old controllers (rk2928, rk |
| CVE-2026-53153 | Modified | 未確認 | CWE-820 | In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clearing xarray entry on reparent memcg_reparent_list_lrus() clears the dying memcg' |
| CVE-2026-53154 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore reservation on error in hugetlb folio copy paths Two sites in mm/hugetlb.c allocate a huge |
| CVE-2026-53155 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: use correct flags for device private PMD entry Commit 65edfda6f3f2 ("mm/rmap: extend rmap and | |
| CVE-2026-53156 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix use-after-free bugs in error paths Fix several instances of error paths in which we call __nv |
| CVE-2026-53157 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: phonet: free phonet_device after RCU grace period phonet_device_destroy() removes a phonet_device from th |
| CVE-2026-53158 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix NULL pointer dereference in rpmsg callback A NULL pointer dereference was observed on Hawi |
| CVE-2026-53159 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix DMA address corruption due to find_vma misuse fastrpc_get_args() uses find_vma() to look up | |
| CVE-2026-53160 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free race in fastrpc_map_create fastrpc_map_lookup returns a raw pointer after re |
| CVE-2026-53161 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context There is a race between fastrpc_device_ |
| CVE-2026-53162 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memcg: use round-robin victim selection in refill_stock Harry Yoo reported that get_random_u32_below() is not | |
| CVE-2026-53163 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued syzbot triggered the following splat in remo |
| CVE-2026-53164 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Do not try to iommu_map a 0 length region in swiotlb iommu_dma_iova_link_swiotlb() processes a mapp | |
| CVE-2026-53165 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio->mapping deref during error reporting When a buffered read fails, iomap_fini |
| CVE-2026-53166 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53167 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios FUSE_NOTIFY_RETRIEVE must be limited to uptodate folios; ! |
| CVE-2026-53168 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRI | |
| CVE-2026-53169 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject NPU_OP_RESIZE commands from userspace NPU_OP_RESIZE is a U85-only command that the driver |
| CVE-2026-53170 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject DMA commands with uninitialized length cmd_state_init() initializes the command state wit |
| CVE-2026-53171 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix arithmetic issues in dma_length() dma_length() derives DMA region usage from command stream | |
| CVE-2026-53172 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix IFM region index out-of-bounds in command stream parser NPU_SET_IFM_REGION extracts the regi |
| CVE-2026-53173 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() The command stream parsing loop increm |
| CVE-2026-53174 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovl: keep err zero after successful ovl_cache_get() ovl_iterate_merged() stores PTR_ERR(cache) in err before c | |
| CVE-2026-53175 | Modified | 未確認 | CWE-416, CWE-825 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush On netns teardown, fqdir_pre_exit() walks |
| CVE-2026-53176 | Modified | 未確認 | CWE-191, CWE-839 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN In drivers/infiniband/ulp/isert/ib_isert.c, isert_lo |
| CVE-2026-53177 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recov |
| CVE-2026-53178 | Modified | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is |
| CVE-2026-53179 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix buffer over-read in rtw_update_protection rtw_update_protection() is called with a poi |
| CVE-2026-53180 | Modified | 未確認 | CWE-667, CWE-835 | In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_remote_up() tmigr_handle_remote_cpu() skips timer_expire_remote |
| CVE-2026-53181 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog leak on failed handshake When vmci_transport_recv_connecting_server() returns a |
| CVE-2026-53182 | Modified | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized EMA RNR lists nl80211_parse_rnr_elems() stores the parsed element count in a u |
| CVE-2026-53183 | Modified | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the `window` field in the TCP header refers to the |
| CVE-2026-53184 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before running a sockmap verdict On the UDP receive path skb->dev is repurposed as dev_scr |
| CVE-2026-53185 | Modified | 未確認 | CWE-364, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_bvec_write_partial() zram_read_page() picks the sync or async backing device |
| CVE-2026-53186 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRP_RSP sense copy by the received length srp_process_rsp() copies sense data from rsp->data + |
| CVE-2026-53187 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc The cpu_id attribute supplied by user space throug |
| CVE-2026-53188 | Modified | 未確認 | CWE-285 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not safe to rely only on t |
| CVE-2026-53189 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RS |
| CVE-2026-53190 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() dma_fence_unwrap_for_each() in | |
| CVE-2026-53191 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries When a bundle recv retries inside io_re |
| CVE-2026-53192 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.g. when a userspace timer (CONF |
| CVE-2026-53193 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Forcibly close timer instances at closing When snd_timer object is freed via snd_timer_free() and |
| CVE-2026-53194 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer overflow klsi_105_prepare_write_buffer() is called by the generic |
| CVE-2026-53195 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() build_i2c_fw_hdr() allocates a fixed-size buffer o |
| CVE-2026-53196 | Modified | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) b |
| CVE-2026-53197 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() iptfs_destroy_state() calls hrtimer_cancel() while hol |
| CVE-2026-53198 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL A deferred byte-range lock (an SMB2_LO |
| CVE-2026-53199 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf netvsc_copy_to_send_buf() copies page buffer entries |
| CVE-2026-53200 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX XN has already been extracted from its bitfield position | |
| CVE-2026-53201 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" This reverts commit 8533051ce | |
| CVE-2026-53202 | Modified | 未確認 | CWE-190, CWE-674, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied |
| CVE-2026-53203 | Modified | 未確認 | CWE-120, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the |
| CVE-2026-53204 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe rsu_send_msg() can return -ETIMEDOU |
| CVE-2026-53205 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds checks for firmware log indices Add validation that read and write indices in the firmw |
| CVE-2026-53206 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate that the firmware runtime memory specified i | |
| CVE-2026-53207 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison Two concurrent madvise(MADV_HWPO |
| CVE-2026-53208 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/bluetooth/l2cap_core.c:l2cap_sig_channel() a | |
| CVE-2026-53209 | Modified | 未確認 | CWE-122, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend Existing advertising instances can alread |
| CVE-2026-53210 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in register_shm_helper() register_shm_helper() allocates shm before calling iov_iter_np |
| CVE-2026-53211 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register NFT_META_BRI_IIFHWADDR declares its de |
| CVE-2026-53212 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls metadata_dst_free() |
| CVE-2026-53213 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc() memory leak Don't just overwrite the original pointer passed to krealloc() with its re |
| CVE-2026-53214 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix a potential NPD in cleanup_prefix_route() addrconf_get_prefix_route() can return the fib6_null_entry |
| CVE-2026-53215 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: refill RX buffers before XDP or skb use The RX error path returns the current descriptor buffer to |
| CVE-2026-53216 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buffer mvpp2 has short and long BM pools, and short pool buffers ca | |
| CVE-2026-53217 | Modified | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware |
| CVE-2026-53218 | Modified | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes user-controlled priv- |
| CVE-2026-53219 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leaking percpu counter pointers The native and compat get-entries paths copy the fi | |
| CVE-2026-53220 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebt_redirect_tg() dereferences br_port_get_rcu() return without a NULL chec |
| CVE-2026-53221 | Modified | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(), when an exact match for a tu |
| CVE-2026-53222 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix resource freeing order Commit a60fc3294a37 ("ptp: rework ptp_clock_unregister() to disable event |
| CVE-2026-53223 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue skbs skb_is_err_queue() treats PACKET_OUTGOING as the sole mark |
| CVE-2026-53224 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctp_unpack_cookie() only checked that t |
| CVE-2026-53225 | Modified | 未確認 | CWE-125, CWE-908 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() __sctp_rcv_asconf_lookup() in net/sctp/input.c only check |
| CVE-2026-53226 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: fix generic IRQ chip leak on remove The driver allocates domain generic chips using irq_alloc_ |
| CVE-2026-53227 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfree_skb of ERR_PTR After the patch in the "Fixes" tag, the allocation of the |
| CVE-2026-53228 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6_tunnel_xmit() caches the inner IPv6 header pointe |
| CVE-2026-53229 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure In the XSK branch of mlx5e_xmit_xdp_buff(), |
| CVE-2026-53230 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list mlx5_query_nic_vport_mac_list() sizes its fi |
| CVE-2026-53231 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy We don't have support for PHY-driver SFP c |
| CVE-2026-53232 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfp_bus_del_upstream |
| CVE-2026-53233 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netdev_nl_bind_rx_doit() Sashiko flags that genlmsg_reply() always consumes the skb |
| CVE-2026-53234 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: Fix use-after-free during device removal The driver was using devm_register_netdev() which cau |
| CVE-2026-53235 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list() skb_gro_receive_list() calls skb_pull(skb, skb_gro_offset(s | |
| CVE-2026-53236 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP so | |
| CVE-2026-53237 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix NULL pointer dereference in suspend/resume mvebu_pwm_suspend() and mvebu_pwm_resume() are cal |
| CVE-2026-53238 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netlabel: validate unlabeled address and mask attribute lengths netlbl_unlabel_addrinfo_get() used the address | |
| CVE-2026-53239 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Fix the race by pruning the bin whi |
| CVE-2026-53240 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload __input_process_payload() stores first |
| CVE-2026-53241 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming | |
| CVE-2026-53242 | Modified | 未確認 | CWE-362, CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams snd_pcm_drain() uses init_waitq |
| CVE-2026-53243 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: rseq: Fix using an uninitialized stack variable in rseq_exit_user_update() There is an bug in which an uniniti |
| CVE-2026-53244 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4_create_file() atomic_create() in fs/namei.c drops the reference t | |
| CVE-2026-53245 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr In mrp_pdu_parse_vecattr(), vector attribut | |
| CVE-2026-53246 | Modified | 未確認 | CWE-125, CWE-787 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing When a listening SCTP server processes |
| CVE-2026-53247 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown mtk_free_dev() calls metadata_dst_free |
| CVE-2026-53248 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix use-after-free in metadata dst teardown airoha_metadata_dst_free() runs metadata_dst_free() w |
| CVE-2026-53249 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options This patch restricts setting Loose Source and Record Route (L | |
| CVE-2026-53250 | Modified | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() The TX metadata area resides in the UMEM |
| CVE-2026-53251 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync hci_get_route() returns a reference-coun |
| CVE-2026-53252 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_alloc_dev() Early failures in Bluetooth HCI UART configuration |
| CVE-2026-53253 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing A BNEP peer can send a short BNEP SDU. bnep_rx_frame() rea |
| CVE-2026-53254 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb->data to protocol-spec |
| CVE-2026-53255 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlv_data_is_valid() reads each advertising data f |
| CVE-2026-53256 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() rfcomm_get_sock_by_channel() scans rfcomm_sk_l |
| CVE-2026-53257 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT cap/oper consistency Xiang Mei reports that mac80211 could crash if eht_cap is | |
| CVE-2026-53258 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev->int_scan_req is leaked if cfg80211_scan() fails. Note that |
| CVE-2026-53259 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv6: anycast: insert aca into global hash under idev->lock syzbot reported a splat [1]: a slab-use-after-free |
| CVE-2026-53260 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). syzbot reported a weird reqsk->rsk_refcn |
| CVE-2026-53261 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relation on devlink free devlink relation state is normally released from devl_unregis |
| CVE-2026-53262 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() pppol2tp_ioctl() read sock->sk->sk_user_data dir |
| CVE-2026-53263 | Modified | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in lowpan_iphc_mcast_ctx_ad |
| CVE-2026-53264 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run c |
| CVE-2026-53265 | Modified | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de ("dm cache policy smq: fix mis |
| CVE-2026-53266 | Analyzed | 掲載 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre |
| CVE-2026-53267 | Modified | 未確認 | CWE-121, CWE-674 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: bail out on template ct in get eval I noticed this issue while looking at a historic syzbot |
| CVE-2026-53268 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've matched the command s |
| CVE-2026-53269 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure register netfil | |
| CVE-2026-53270 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ip_vs_edit_service() while unbinding the old scheduler clears |
| CVE-2026-53271 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers smb2_oplock_break_noti() and smb2_lease_ |
| CVE-2026-53272 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress z_erofs_decompress_kickoff() can race with filesystem unmoun |
| CVE-2026-53273 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a199 ("tee: opte |
| CVE-2026-53274 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS A logic flaw in __smc_setsockopt() allo | |
| CVE-2026-53275 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query, a pointer to the mul |
| CVE-2026-53276 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the bis pointer is cache |
| CVE-2026-53277 | Modified | 未確認 | CWE-662, CWE-820 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk |
| CVE-2026-53278 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocated before destroying it __destroy_component_cfg() is called |
| CVE-2026-53279 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_ad | |
| CVE-2026-53280 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() Local sashiko review pointed it out th |
| CVE-2026-53281 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d ("iommu/vt-d: Avoid use |
| CVE-2026-53282 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-kjump kexec The version of purgatory code shipped by kexec-t | |
| CVE-2026-53283 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_iommu() iommu_device_register() walks every device on the PCI b |
| CVE-2026-53284 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes [WARNING] With extra warning on dirty exte |
| CVE-2026-53285 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED [Why] dcn32_validate_ba |
| CVE-2026-53286 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix double free and use-after-free in aux device error paths When auxiliary_device_add() fails in idpf_p |
| CVE-2026-53287 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPSET records __audit_log_capset() records the effective capab | |
| CVE-2026-53288 | Analyzed | 未確認 | CWE-674 | In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel mapping The final part of [data, end) segment may overflow into |
| CVE-2026-53289 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_reset_all_vfs() ice_reset_all_vfs() ignores the return value of ice_v |
| CVE-2026-53290 | Modified | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/eustall: Fix drm_dev_put called before stream disable in close In xe_eu_stall_stream_close(), drm_dev_p |
| CVE-2026-53291 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In cx_probe(), the return value of snd_hda_jack |
| CVE-2026-53292 | Modified | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind syzbot reported a kernel BUG triggered fro |
| CVE-2026-53293 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG There were multiple issues in that code. First of all the order betw |
| CVE-2026-53294 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: don't free the reused channel The RX channel can be aliased to the TX channel if it has |
| CVE-2026-53295 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailb | |
| CVE-2026-53296 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error On probe error, free the previously obtained channels. Thi |
| CVE-2026-53297 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocation If PM resume fails (e.g., mana_attach() returns an erro |
| CVE-2026-53298 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() If queue entry or DMA descriptor |
| CVE-2026-53299 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() If queue entry list allocation fails in |
| CVE-2026-53300 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The AI-generated review reported a potential DMA use-after-free |
| CVE-2026-53301 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing reset ops causing kernel null pointer dereference. This SOC |
| CVE-2026-53302 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip93_hmac_setkey() allocates a temporary ahash transform for c |
| CVE-2026-53303 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() In f2fs_sbi_show(), the extension_list, e |
| CVE-2026-53304 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameter def_reserved_size defines the default |
| CVE-2026-53305 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying to unbind a device in order to bind to it vfio-platform as: |
| CVE-2026-53306 | Analyzed | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: tty: hvc_iucv: fix off-by-one in number of supported devices MAX_HVC_IUCV_LINES == HVC_ALLOC_TTY_ADAPTERS == 8 |
| CVE-2026-53307 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux' property The pinconf_generic_parse_dt_pinmux() assumes that |
| CVE-2026-53308 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allocating work |
| CVE-2026-53309 | Analyzed | 未確認 | CWE-193 | In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison The local-vs-remote region comparison loop |
| CVE-2026-53310 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabric receives an error interrupt, the error ma | |
| CVE-2026-53311 | Analyzed | 未確認 | CWE-908 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate() fuse_dentry_revalidate() may be called with a dentry that d |
| CVE-2026-53312 | Analyzed | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it sho |
| CVE-2026-53313 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths In dc_dmub_srv_log_diagnostic_data() and dc |
| CVE-2026-53314 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure syzbot reported the following warning: | |
| CVE-2026-53315 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() ras_core_get_utc_second_timestamp() retriev |
| CVE-2026-53316 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() Fixes a NULL pointer dereference when ras_cor |
| CVE-2026-53317 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Place upper limit on station AID Any station configured with an AID over 20 causes a firmw | |
| CVE-2026-53318 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() Move the NULL check for 'sta' b |
| CVE-2026-53319 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() wbt_init_enable_default() uses WARN_ON_ONCE to che |
| CVE-2026-53320 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() nilfs_ioctl_mark_blocks_dirty() uses bd_obl | |
| CVE-2026-53321 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently there's no cap on the maximum amount of time that napi is al | |
| CVE-2026-53322 | Modified | 未確認 | CWE-415, CWE-826 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() cal |
| CVE-2026-53323 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops DSA replaces the conduit (master) device |
| CVE-2026-53324 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pci_name() for debugfs directory naming Use pci_name(pdev) for the per-device debugfs directory |
| CVE-2026-53325 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agp_amd64_probe() A NULL pointer dereference was observed in the AM |
| CVE-2026-53404 | Analyzed | 未確認 | CWE-670 | Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions w |
| CVE-2026-53406 | Analyzed | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of |
| CVE-2026-53407 | Analyzed | 未確認 | CWE-939 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an |
| CVE-2026-53408 | Analyzed | 未確認 | CWE-939 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an |
| CVE-2026-53423 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in membraneframework membrane_mp4_plugin allows unauthenticated denial-of-service via BEAM atom table exhaustion. |
| CVE-2026-53426 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parse_document/2 accepts a {:json, json} source. In lib/mdex |
| CVE-2026-53427 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leandrocp MDEx allows stored or reflected cross-site scripting via attacker-co |
| CVE-2026-53428 | Deferred | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value vulnerability in leandrocp mdex allows an unauthenticated attacker to cause a denial of service through unbounded memory allocation. co |
| CVE-2026-53429 | Deferred | 未確認 | CWE-401 | Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered document to cause a denial of service |
| CVE-2026-53430 | Deferred | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzi |
| CVE-2026-53432 | Analyzed | 未確認 | CWE-190 | fzf is vulnerable to Integer Overflow leading to crash in FuzzyMatchV2 function. When input line length is approximately 2,200,000 bytes and pattern length is 999 bytes, the produc |
| CVE-2026-53433 | Analyzed | 未確認 | CWE-407 | fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenat |
| CVE-2026-53434 | Analyzed | 未確認 | CWE-390 | Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 throug |
| CVE-2026-53435 | Modified | 未確認 | CWE-502 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker- |
| CVE-2026-53436 | Analyzed | 未確認 | CWE-601 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments |
| CVE-2026-53437 | Modified | 未確認 | CWE-601 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline charact |
| CVE-2026-53438 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue ite |
| CVE-2026-53439 | Analyzed | 未確認 | CWE-862 | Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to en |
| CVE-2026-53440 | Analyzed | 未確認 | CWE-601 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after logi |
| CVE-2026-53441 | Modified | 未確認 | CWE-79 | Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be se |
| CVE-2026-53442 | Analyzed | 未確認 | CWE-311 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml |
| CVE-2026-53460 | Modified | 未確認 | CWE-770 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request |
| CVE-2026-53461 | Modified | 未確認 | CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect loop in the ICON decoder can r |
| CVE-2026-53462 | Analyzed | 未確認 | CWE-416 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when an allocation fails in CheckPrimitiveE |
| CVE-2026-53463 | Analyzed | 未確認 | CWE-476 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the dis |
| CVE-2026-53464 | Analyzed | 未確認 | CWE-401 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a |
| CVE-2026-53465 | Analyzed | 未確認 | CWE-122, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-wri |
| CVE-2026-53469 | Analyzed | 未確認 | CWE-306 | A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorizati |
| CVE-2026-53470 | Analyzed | 未確認 | CWE-639 | A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. This flaw |
| CVE-2026-53471 | Analyzed | 未確認 | CWE-639 | A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens (JWTs) for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fa |
| CVE-2026-53473 | Analyzed | 未確認 | CWE-79 | A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organi |
| CVE-2026-53474 | Analyzed | 未確認 | CWE-89 | A flaw was found in migration-planner. A remote authenticated attacker could exploit this vulnerability by uploading a specially crafted RVTools .xlsx file. Due to improper input s |
| CVE-2026-53475 | Analyzed | 未確認 | CWE-295 | A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allo |
| CVE-2026-53476 | Analyzed | 未確認 | CWE-22, CWE-59 | A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a s |
| CVE-2026-53519 | Deferred | 未確認 | CWE-22 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prior to version 2.0.13, fallbackToFrontend in the dashboard's NoRoute handler treat |
| CVE-2026-53520 | Deferred | 未確認 | CWE-284 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashb |
| CVE-2026-53521 | Deferred | 未確認 | CWE-863 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/{id} accepts and persists |
| CVE-2026-53522 | Deferred | 未確認 | CWE-770 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the Nezha dashboard exposes two endpoint |
| CVE-2026-53523 | Deferred | 未確認 | CWE-601 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the getRedirectURL function in oauth2.go |
| CVE-2026-53537 | Analyzed | 未確認 | CWE-20, CWE-436 | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, parse_options_header parsed Content-Disposition (and Content-Type) headers with email.message.Message, |
| CVE-2026-53538 | Analyzed | 未確認 | CWE-436, CWE-444 | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, QuerystringParser treated ; as a field separator in application/x-www-form-urlencoded bodies, in addit |
| CVE-2026-53539 | Analyzed | 未確認 | CWE-400, CWE-407 | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator w |
| CVE-2026-53540 | Analyzed | 未確認 | CWE-1284 | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of t |
| CVE-2026-53550 | Analyzed | 未確認 | CWE-407 | js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by re |
| CVE-2026-53568 | Deferred | 未確認 | CWE-79 | Frappe is a full-stack web application framework. Prior to versions 15.107.2 and 16.17.4, there is a stored XSS vulnerablity in Frappe Report/List View. This issue has been patched |
| CVE-2026-53571 | Analyzed | 未確認 | CWE-200, CWE-22 | Vite is a frontend tooling framework for JavaScript. Prior to 8.0.16, 7.3.5, and 6.4.3, the contents of files that are specified by server.fs.deny can be returned to the browser on |
| CVE-2026-53576 | Analyzed | 未確認 | CWE-288, CWE-94 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request who |
| CVE-2026-53577 | Analyzed | 未確認 | CWE-863 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the previewFileFromExecution endpoint (GET /api/v1/{tenant}/executions/{executionId}/file |
| CVE-2026-53606 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Versions of sanitize-html prior to 2.17.5 us |
| CVE-2026-53607 | Deferred | 未確認 | CWE-918 | ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, when `prettyUrls: true` is enabled on `@apostrophecms/file` (a documented |
| CVE-2026-53608 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system. Versions up to and including 1.4.2 of the `@apostrophecms/seo` package injects the Google Analytics Tracking ID ( |
| CVE-2026-53609 | Deferred | 未確認 | CWE-1321 | ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, `apos.util.set()` traverses dot-notation paths without sanitizing `__prot |
| CVE-2026-53622 | Modified | 未確認 | CWE-288, CWE-289 | Traefik is an HTTP reverse proxy and load balancer. Versions prior to 3.7.3, 3.6.18, and 2.11.51 have a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selectio |
| CVE-2026-53632 | Deferred | 未確認 | CWE-522, CWE-73 | launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC pat |
| CVE-2026-53634 | Deferred | 未確認 | CWE-862 | Sharp is a content management framework built for Laravel as a package. From version 9.0.0 to before version 9.22.3, the create and store endpoints of the Quick Creation Command fe |
| CVE-2026-53655 | Analyzed | 未確認 | CWE-436 | node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any |
| CVE-2026-5366 | Analyzed | 未確認 | CWE-94 | Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, wh |
| CVE-2026-53661 | Awaiting Analysis | 未確認 | CWE-614 | Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.9.1, boruta session |
| CVE-2026-53662 | Deferred | 未確認 | CWE-601, CWE-79 | immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 until 4eb1003, a reflected cross-site scripting (XSS) vulnerability on the /auth/ |
| CVE-2026-53663 | Awaiting Analysis | 未確認 | CWE-352 | React Router is a router for React. From 7.12.0 until 7.15.1, certain CSRF checks in React Router v7 Framework Mode were insufficient and run on POST requests, but were bypassed on |
| CVE-2026-53673 | Deferred | 未確認 | CWE-639 | BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows authenticated attackers to access arbitrary private message thread |
| CVE-2026-53674 | Deferred | 未確認 | CWE-943 | BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention resolver that, when username compatibility mode is enabled, allows attackers to mani |
| CVE-2026-53675 | Deferred | 未確認 | CWE-639 | BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any authenticated attacker to enumerate another user's complete fri |
| CVE-2026-53676 | Deferred | 未確認 | CWE-1321 | ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with |
| CVE-2026-53689 | Deferred | 未確認 | CWE-1284 | libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in |
| CVE-2026-53690 | Deferred | 未確認 | CWE-89 | An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize use |
| CVE-2026-53691 | Deferred | 未確認 | CWE-434 | An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mo |
| CVE-2026-53692 | Deferred | 未確認 | CWE-328 | Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain |
| CVE-2026-53693 | Deferred | 未確認 | CWE-116, CWE-79 | A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identif |
| CVE-2026-53694 | Deferred | 未確認 | CWE-88 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, |
| CVE-2026-53698 | Deferred | 未確認 | CWE-36 | Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set. |
| CVE-2026-53701 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. In the multi-slice-in-tile processing of gst_h266_parser_pa |
| CVE-2026-53702 | Awaiting Analysis | 未確認 | CWE-787 | A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the parser uses an incorrect loop |
| CVE-2026-53703 | Awaiting Analysis | 未確認 | CWE-125 | A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to config |
| CVE-2026-53704 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the de |
| CVE-2026-53705 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * |
| CVE-2026-53721 | Analyzed | 未確認 | CWE-178, CWE-863 | Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4.4.7, there is a route-rule middleware bypass via case-sensi |
| CVE-2026-53722 | Analyzed | 未確認 | CWE-79, CWE-83 | Nuxt is an open-source web development framework for Vue.js. Prior to versions 3.21.7 and 4.4.7, <NuxtLink> did not validate the URL scheme of values bound to its to or href props |
| CVE-2026-53723 | Awaiting Analysis | 未確認 | CWE-20, CWE-91 | Guzzle Services provides an implementation of the Guzzle Command library that uses Guzzle service descriptions to describe web services, serialize requests, and parse responses int |
| CVE-2026-53724 | Deferred | 未確認 | CWE-434, CWE-79 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.79 and 9.9.1-alpha.4, the default file upload extensio |
| CVE-2026-53725 | Deferred | 未確認 | CWE-200 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to before version 9.9.1-alpha.5, apps that enable MFA and |
| CVE-2026-53726 | Deferred | 未確認 | CWE-639 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.80 and 9.9.1-alpha.6, a relation query using the $rela |
| CVE-2026-53736 | Deferred | 未確認 | CWE-352 | Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handler that lacks nonce verification. Attackers can trick an auth |
| CVE-2026-53737 | Deferred | 未確認 | CWE-79 | Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected feed data can inject sc |
| CVE-2026-53738 | Deferred | 未確認 | CWE-863 | Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete p |
| CVE-2026-53739 | Deferred | 未確認 | CWE-352 | Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicate_post_dismiss_notice handler, which verifies no nonce or capability. Attackers |
| CVE-2026-53740 | Deferred | 未確認 | CWE-79 | Yoast Duplicate Post through 4.6 inserts an unescaped post title and permalink into the Classic Editor scheduled republish notice. Attackers can schedule a republish copy with a cr |
| CVE-2026-53741 | Deferred | 未確認 | CWE-79 | Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal without encoding. Because sanitize_text_field leaves quotes intact |
| CVE-2026-53742 | Deferred | 未確認 | CWE-79 | Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can cra |
| CVE-2026-53753 | Analyzed | 未確認 | CWE-913, CWE-94 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only b |
| CVE-2026-53754 | Analyzed | 未確認 | CWE-918 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in deploy/do |
| CVE-2026-53755 | Analyzed | 未確認 | CWE-918 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the pro |
| CVE-2026-53765 | Analyzed | 未確認 | CWE-59 | Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live Chrome browser. From 0.20.0 until 1.1.0, The chrome-devtools-mcp daemon writes it |
| CVE-2026-53766 | Analyzed | 未確認 | CWE-22, CWE-59 | Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live Chrome browser. From 0.24.0 until 1.1.0, McpContext.validatePath() enforces works |
| CVE-2026-53776 | Deferred | 未確認 | CWE-613 | Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validate_exp = fals |
| CVE-2026-53777 | Deferred | 未確認 | CWE-22 | Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by sup |
| CVE-2026-53778 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53779 | Deferred | 未確認 | CWE-22 | WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by se |
| CVE-2026-53781 | Deferred | 未確認 | CWE-770 | Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size |
| CVE-2026-53782 | Deferred | 未確認 | CWE-918 | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content fro |
| CVE-2026-53787 | Awaiting Analysis | 未確認 | CWE-434 | Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary |
| CVE-2026-53805 | Awaiting Analysis | 未確認 | CWE-502 | NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-mod |
| CVE-2026-53806 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. Attackers can exploit this by usi |
| CVE-2026-53807 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip commands.allowFrom validation. Att |
| CVE-2026-53808 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows agent tool calls to set apply: true despite approvalPolicy: p |
| CVE-2026-53809 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using provider aliases to compare against aliases instead of canonic |
| CVE-2026-53810 | Analyzed | 未確認 | CWE-829 | OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. Attackers wit |
| CVE-2026-53811 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable di |
| CVE-2026-53812 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks throug |
| CVE-2026-53813 | Analyzed | 未確認 | CWE-427 | OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with acc |
| CVE-2026-53814 | Analyzed | 未確認 | CWE-266 | OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appr |
| CVE-2026-53815 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust callers can request messages from |
| CVE-2026-53816 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system |
| CVE-2026-53817 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to spoof locality information and obtain dura |
| CVE-2026-53818 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool- |
| CVE-2026-53819 | Analyzed | 未確認 | CWE-426 | OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attac |
| CVE-2026-53820 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass intended command |
| CVE-2026-53821 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or trusted-proxy authorization baseline. Unpaired or restricte |
| CVE-2026-53822 | Analyzed | 未確認 | CWE-367, CWE-77 | OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments a |
| CVE-2026-53823 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to mutable Slack display names. Attackers with Slack account access can c |
| CVE-2026-53824 | Analyzed | 未確認 | CWE-613 | OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. Attack |
| CVE-2026-53825 | Analyzed | 未確認 | CWE-22 | OpenClaw before 2026.4.7 contains an arbitrary file read vulnerability in the memory-wiki ingest feature that allows authenticated Gateway operators with operator.write scope to re |
| CVE-2026-53826 | Analyzed | 未確認 | CWE-668 | OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes the real workspace path to child prompts. Attackers can exploi |
| CVE-2026-53827 | Analyzed | 未確認 | CWE-918 | OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-controlled metadata to forward action payloads with Gateway cre |
| CVE-2026-53828 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper p |
| CVE-2026-53829 | Analyzed | 未確認 | CWE-451 | OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized |
| CVE-2026-53830 | Analyzed | 未確認 | CWE-613 | OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and Zalo webhook secrets to remain active after secrets.reload. |
| CVE-2026-53831 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on PO |
| CVE-2026-53832 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to th |
| CVE-2026-53833 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows authenticated senders to mutate configuration without explicit a |
| CVE-2026-53834 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch slash commands that allows authenticated senders to skip allowFrom policy checks. Att |
| CVE-2026-53835 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.5.6 contains a configuration enforcement bypass vulnerability in Feishu dynamic-agent bindings that allows authenticated senders to create or update bindings w |
| CVE-2026-53836 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag |
| CVE-2026-53837 | Analyzed | 未確認 | CWE-636 | OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended |
| CVE-2026-53838 | Analyzed | 未確認 | CWE-367 | OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit r |
| CVE-2026-53839 | Analyzed | 未確認 | CWE-1023 | OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes instead of exact hostnames. Attackers can expl |
| CVE-2026-53840 | Analyzed | 未確認 | CWE-522 | OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redir |
| CVE-2026-53841 | Analyzed | 未確認 | CWE-83 | OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe javascript: and data: links in generated content. Attackers c |
| CVE-2026-53842 | Analyzed | 未確認 | CWE-426 | OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influence Python runtime selection through CLOUDSDK_PYTHON during |
| CVE-2026-53843 | Analyzed | 未確認 | CWE-613 | OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-scoped device session can re-establish node token authority after revocation. Att |
| CVE-2026-53844 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper |
| CVE-2026-53845 | Analyzed | 未確認 | CWE-693 | OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through the affected dispatch path skip before-tool-call hook coverage. Attackers can expl |
| CVE-2026-53846 | Analyzed | 未確認 | CWE-426 | OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files to override the npm_execpath configuration used for bundled |
| CVE-2026-53847 | Analyzed | 未確認 | CWE-266 | OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gateway operators with operator.write access to modify global co |
| CVE-2026-53848 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wrapper-level side effects outside allowlisted command intent. |
| CVE-2026-53849 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly validates Discord account identity using mutable display names instead |
| CVE-2026-5385 | Deferred | 未確認 | CWE-79 | An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7. |
| CVE-2026-53850 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows authenticated callers to execute the command without proper aut |
| CVE-2026-53851 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications. Attackers |
| CVE-2026-53852 | Analyzed | 未確認 | CWE-636 | OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing that allows authenticated operators to restore broader scopes than intended by subm |
| CVE-2026-53853 | Analyzed | 未確認 | CWE-693, CWE-863 | OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowed arguments for allowlisted executables on |
| CVE-2026-53854 | Analyzed | 未確認 | CWE-863 | OpenClaw before 2026.4.25 contains a privilege escalation vulnerability in internal and webchat command authentication that allows senders to inherit wildcard ownerAllowFrom state |
| CVE-2026-53855 | Analyzed | 未確認 | CWE-184, CWE-863 | OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operators to weaken strict allowlist checks via shell positional parameters. Attackers |
| CVE-2026-53856 | Analyzed | 未確認 | CWE-732 | OpenClaw 2026.4.23 before 2026.4.24 contains an insecure file permissions vulnerability in config recovery that restores OpenClaw.json with overly broad permissions. Local attacker |
| CVE-2026-53857 | Analyzed | 未確認 | CWE-290 | OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata could match allowFrom policy entries through display name cha |
| CVE-2026-53858 | Analyzed | 未確認 | CWE-426 | OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots. Attackers c |
| CVE-2026-53859 | Analyzed | 未確認 | CWE-1023, CWE-918 | OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-derived |
| CVE-2026-53860 | Analyzed | 未確認 | CWE-807, CWE-863 | OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match allowlist entries through conversation metadata rather than |
| CVE-2026-53861 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined POSIX inline-command flags. Attackers can execute shell con |
| CVE-2026-53862 | Analyzed | 未確認 | CWE-266, CWE-345 | OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to reuse tokens with broader requested scopes. Attackers can re |
| CVE-2026-53863 | Analyzed | 未確認 | CWE-639 | OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidated group IDs. Attackers who can supply a group ID to the poli |
| CVE-2026-53864 | Analyzed | 未確認 | CWE-184 | OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer that allows Node.js control variables to bypass validation. Attacker |
| CVE-2026-53865 | Analyzed | 未確認 | CWE-426 | OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-derived service paths to influence trash command selection. Att |
| CVE-2026-53866 | Analyzed | 未確認 | CWE-862 | OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authenticated operators to execute unapproved commands. A command r |
| CVE-2026-53867 | Deferred | 未確認 | CWE-459 | Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through p |
| CVE-2026-53868 | Deferred | 未確認 | CWE-306 | Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletio |
| CVE-2026-53869 | Deferred | 未確認 | CWE-306 | Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware |
| CVE-2026-53870 | Deferred | 未確認 | CWE-276 | Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to |
| CVE-2026-53871 | Deferred | 未確認 | CWE-565 | Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts unauthenticated profile names from the hermes_profile |
| CVE-2026-53872 | Deferred | 未確認 | CWE-22 | picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to read arbitrary server files by chaining io.FileIO and urllib. |
| CVE-2026-53873 | Deferred | 未確認 | CWE-184 | picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run() function, allowing attackers to achieve arbitrary |
| CVE-2026-53874 | Deferred | 未確認 | CWE-502 | picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects |
| CVE-2026-53875 | Deferred | 未確認 | CWE-95 | picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the __re |
| CVE-2026-53876 | Deferred | 未確認 | CWE-78 | RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs |
| CVE-2026-53899 | Analyzed | 未確認 | CWE-345 | Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. T |
| CVE-2026-53900 | Analyzed | 未確認 | CWE-345, CWE-384 | Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into |
| CVE-2026-53901 | Deferred | 未確認 | CWE-20 | Cerebrate before version 1.37 contains a mass-assignment vulnerability in the generic CRUD add path. The add() handler attempted to remove an attacker-supplied id from $params befo |
| CVE-2026-53911 | Deferred | 未確認 | CWE-639 | Cerebrate before version 1.37 allowed the id primary key field to be supplied through request input during CRUD edit operations and certain custom entity patching flows. In affecte |
| CVE-2026-53912 | Deferred | 未確認 | CWE-200 | Cerebrate before version 1.37 exposed credential material from self-registration requests. The self-registration workflow stored the registrant’s hashed password in the inbox messa |
| CVE-2026-53914 | Analyzed | 未確認 | CWE-502 | In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata |
| CVE-2026-53915 | Analyzed | 未確認 | CWE-73 | In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration |
| CVE-2026-53916 | Analyzed | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connect |
| CVE-2026-53917 | Analyzed | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause |
| CVE-2026-53923 | Analyzed | 未確認 | CWE-200, CWE-681 | vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (csr |
| CVE-2026-53925 | Deferred | 未確認 | CWE-22 | Glances is an open-source system cross-platform monitoring tool. From 4.0.8 until 4.5.5, the secure_popen() function in glances/secure.py interprets > (file redirection), | (pipe), |
| CVE-2026-53926 | Deferred | 未確認 | CWE-613 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, revokeAllOAuthTokensByUser in the users service is an empty stub being called from passwordChange, pa |
| CVE-2026-53927 | Deferred | 未確認 | CWE-918 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the spreadsheet-fetch endpoint (axiosRequestMake) accepted URLs whose path contained a permitted exte |
| CVE-2026-53928 | Deferred | 未確認 | CWE-613 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, a stolen refresh token survived a password-forgot flow and could be used to mint fresh JWTs even afte |
| CVE-2026-53929 | Deferred | 未確認 | CWE-79 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, with NC_SECURE_ATTACHMENTS=true, an authenticated uploader could deliver .html or .svg attachments th |
| CVE-2026-53930 | Deferred | 未確認 | CWE-918 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the base-migration endpoint accepted a caller-supplied URL that the migration worker dereferenced wit |
| CVE-2026-53931 | Deferred | 未確認 | CWE-441, CWE-918 | NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the spreadsheet-import endpoint axiosRequestMake could be used as a generic HTTP proxy. Before the fi |
| CVE-2026-53943 | Deferred | 未確認 | CWE-524 | Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results in cached content being shared between different visitors |
| CVE-2026-53944 | Deferred | 未確認 | CWE-184, CWE-918 | Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, when making an external request, it is possible to bypass the IP filter that ensures the request isn't going |
| CVE-2026-53945 | Deferred | 未確認 | CWE-367, CWE-918 | Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacker |
| CVE-2026-53946 | Deferred | 未確認 | CWE-918 | Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to |
| CVE-2026-53947 | Deferred | 未確認 | CWE-204 | Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacke |
| CVE-2026-53948 | Deferred | 未確認 | CWE-434 | Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, insufficient validation of the client-supplied Content-Type on Ghost's Admin API file upload endpoint allowe |
| CVE-2026-53949 | Deferred | 未確認 | CWE-200, CWE-693 | Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to filters on the public API endpoints could be partially bypassed, making it possibl |
| CVE-2026-53950 | Deferred | 未確認 | CWE-79 | @tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, the ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a malicious |
| CVE-2026-53981 | Deferred | 未確認 | CWE-306 | Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the |
| CVE-2026-53982 | Deferred | 未確認 | CWE-645 | Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding functions by trigger |
| CVE-2026-54006 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/v1/calendars/events/{event_id}/update validates that th |
| CVE-2026-54007 | Modified | 未確認 | CWE-346 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the chat message listener allows non-same-origin input:prompt and |
| CVE-2026-54008 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, backend/open_webui/utils/oauth.py::_process_picture_url calls val |
| CVE-2026-54009 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/chat/completions accepts an image_url.url value that, w |
| CVE-2026-54010 | Analyzed | 未確認 | CWE-284, CWE-639, CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated user attach arbitrary file_id va |
| CVE-2026-54011 | Analyzed | 未確認 | CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6,Open WebUI renders Mermaid blocks from Markdown files in the file |
| CVE-2026-54012 | Analyzed | 未確認 | CWE-284, CWE-285, CWE-862 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets a user who can create, update, or import workspac |
| CVE-2026-54013 | Modified | 未確認 | CWE-116, CWE-693, CWE-79 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI patched SVG XSS in user profile images and webhook pro |
| CVE-2026-54014 | Analyzed | 未確認 | CWE-22 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, a path traversal vulnerability exists in open-webui's cache file |
| CVE-2026-54015 | Analyzed | 未確認 | CWE-284, CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI's prompt version-history endpoints authorize the promp |
| CVE-2026-54016 | Analyzed | 未確認 | CWE-639 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI has a Broken Object Level Authorization (BOLA) vulnera |
| CVE-2026-54017 | Analyzed | 未確認 | CWE-22, CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy in `backend/open_webui/routers/ |
| CVE-2026-54018 | Analyzed | 未確認 | CWE-918 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the SafePlaywrightURLLoader implements a validate_url function to |
| CVE-2026-54019 | Analyzed | 未確認 | CWE-862, CWE-943 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI added collection-level ACL checks, but the patch can s |
| CVE-2026-54021 | Analyzed | 未確認 | CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, several direct, index-addressed Ollama proxy routes accept a call |
| CVE-2026-54022 | Analyzed | 未確認 | CWE-706, CWE-863 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership o |
| CVE-2026-54024 | Analyzed | 未確認 | CWE-770 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2024-11171 (commit bb58a2d0) added limits: { fileSize } to createMul |
| CVE-2026-54025 | Analyzed | 未確認 | CWE-79 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, there is a vulnerability in LibreChat's markdown artifact preview pipeline. The mark |
| CVE-2026-54027 | Analyzed | 未確認 | CWE-862 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the POST /api/files/images endpoint allows any authenticated user to upload files in |
| CVE-2026-54029 | Analyzed | 未確認 | CWE-862 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the DELETE /api/messages/:conversationId/:messageId endpoint allows any authenticate |
| CVE-2026-54030 | Analyzed | 未確認 | CWE-346 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate that the resource parameter from |
| CVE-2026-54033 | Analyzed | 未確認 | CWE-918 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, LibreChat allows users to configure custom OpenAI-compatible API endpoints by settin |
| CVE-2026-54036 | Analyzed | 未確認 | CWE-306 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the GET /api/auth/2fa/enable endpoint can be called by an authenticated user (or att |
| CVE-2026-54037 | Analyzed | 未確認 | CWE-770 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and forkUserLimiter rate limiters to P |
| CVE-2026-54040 | Analyzed | 未確認 | CWE-306 | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the POST /api/auth/2fa/backup/regenerate endpoint regenerates all 2FA backup codes w |
| CVE-2026-54055 | Analyzed | 未確認 | CWE-367, CWE-426, CWE-59 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child pro |
| CVE-2026-54056 | Analyzed | 未確認 | CWE-59 | Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0.47.1, `kitten dnd` can allow a malicious remote drag-and-drop source to overwrite or truncate arbitrary files |
| CVE-2026-54057 | Analyzed | 未確認 | CWE-150, CWE-94 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 (color-control) query reply reflects attacker-controlled bytes, including newlines, into t |
| CVE-2026-54066 | Deferred | 未確認 | CWE-1188, CWE-22, CWE-23 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Traversal via Double URL Encoding") sanitized the /export/ route |
| CVE-2026-54067 | Deferred | 未確認 | CWE-1188, CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, CSS snippet body containing </style> breaks out of its surrounding <style> tag when renderSnippet() i |
| CVE-2026-54068 | Deferred | 未確認 | CWE-306 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDynamicIcon endpoint is explicitly excluded from authentication in SiYuan's kernel r |
| CVE-2026-54069 | Deferred | 未確認 | CWE-346 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-extension:// origins, granting Rol |
| CVE-2026-54070 | Deferred | 未確認 | CWE-184, CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPackageREADME in kernel/bazaar/readme.go renders a Bazaar package README from Markdown to HTML |
| CVE-2026-54088 | Deferred | 未確認 | CWE-306, CWE-78, CWE-88 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, the Hook Authentication fe |
| CVE-2026-54089 | Deferred | 未確認 | CWE-287, CWE-290 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Starting with 2.0.0-rc.1, when FileBrowser |
| CVE-2026-54090 | Deferred | 未確認 | CWE-184, CWE-77 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.33.8, when a shell interpreter i |
| CVE-2026-54091 | Deferred | 未確認 | CWE-863 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, File Browser's public shar |
| CVE-2026-54092 | Deferred | 未確認 | CWE-1284, CWE-400 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, unchecked passwords maximu |
| CVE-2026-54093 | Deferred | 未確認 | CWE-22 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, filebrowser builds the dow |
| CVE-2026-54094 | Deferred | 未確認 | CWE-22, CWE-59 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.14, it does not stop the HTTP |
| CVE-2026-54095 | Rejected | 未確認 | Rejected reason: CVE ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-53826. Reason: This candidate is a duplicate of CVE-2025-53826. Notes: All CVE users should | |
| CVE-2026-54096 | Deferred | 未確認 | CWE-863 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.7, `POST /api/share/<path>` a |
| CVE-2026-54097 | Deferred | 未確認 | CWE-639 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, a low-privileged authentic |
| CVE-2026-54099 | Modified | 未確認 | CWE-269 | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request con |
| CVE-2026-54100 | Modified | 未確認 | CWE-295 | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows worker nodes without verifying |
| CVE-2026-54101 | Rejected | 未確認 | Rejected reason: Reserved but no longer needed. | |
| CVE-2026-54102 | Rejected | 未確認 | Rejected reason: Reserved but no longer needed. | |
| CVE-2026-54103 | Awaiting Analysis | 未確認 | CWE-306 | The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not |
| CVE-2026-54104 | Awaiting Analysis | 未確認 | CWE-602 | The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) trusts cl |
| CVE-2026-54105 | Awaiting Analysis | 未確認 | CWE-639 | The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) expose se |
| CVE-2026-54106 | Awaiting Analysis | 未確認 | CWE-940 | The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) do not va |
| CVE-2026-5411 | Deferred | 未確認 | CWE-434 | The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to arbitrary file upload in all version |
| CVE-2026-54130 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-54133 | Analyzed | 未確認 | CWE-116, CWE-20, CWE-94 | jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP applications with PHP data structures. Version |
| CVE-2026-5415 | Deferred | 未確認 | CWE-288 | The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in all version |
| CVE-2026-54157 | Deferred | 未確認 | CWE-918 | LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.57, the /webapi/proxy endpoint on app.lobehub.com accept |
| CVE-2026-54158 | Deferred | 未確認 | CWE-1188, CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view (database) cell renderer genAVValueHTML interpolates cell content raw in four of i |
| CVE-2026-5416 | Deferred | 未確認 | CWE-78 | Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethern |
| CVE-2026-54184 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions. |
| CVE-2026-54185 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Cornerstone < 7.8.8 versions. |
| CVE-2026-54186 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions. |
| CVE-2026-54187 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions. |
| CVE-2026-54188 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. |
| CVE-2026-54189 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. |
| CVE-2026-5419 | Awaiting Analysis | 未確認 | CWE-208 | A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak |
| CVE-2026-54190 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions. |
| CVE-2026-54191 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions. |
| CVE-2026-54192 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions. |
| CVE-2026-54193 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions. |
| CVE-2026-54194 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions. |
| CVE-2026-54195 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions. |
| CVE-2026-54196 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1. |
| CVE-2026-54197 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions. |
| CVE-2026-54198 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions. |
| CVE-2026-54219 | Deferred | 未確認 | CWE-79 | UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, allowing low privileged attackers to inject a |
| CVE-2026-5422 | Analyzed | 未確認 | CWE-23 | A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/servic |
| CVE-2026-54220 | Deferred | 未確認 | CWE-352 | uBB.threads is vulnerable to a Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an attacker to trick an authenticated user into executing unint |
| CVE-2026-54221 | Deferred | 未確認 | CWE-79 | UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to execute arbitrary JavaScript in the context of |
| CVE-2026-54222 | Deferred | 未確認 | CWE-89 | UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with the underlying database. Due to insufficient input |
| CVE-2026-54223 | Deferred | 未確認 | CWE-22 | UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit templates to read and write any file on the application’s server that application has privile |
| CVE-2026-54224 | Deferred | 未確認 | CWE-405 | UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent requests to view any user profile on instances with many registered users, an authenticated att |
| CVE-2026-54226 | Deferred | 未確認 | CWE-190 | A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue. |
| CVE-2026-54228 | Awaiting Analysis | 未確認 | CWE-367 | A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, a |
| CVE-2026-54229 | Awaiting Analysis | 未確認 | CWE-362 | A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change owne |
| CVE-2026-54230 | Modified | 未確認 | CWE-59 | A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFO |
| CVE-2026-54231 | Modified | 未確認 | CWE-74 | A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the cr |
| CVE-2026-54232 | Analyzed | 未確認 | CWE-427 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer |
| CVE-2026-54233 | Analyzed | 未確認 | CWE-409 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded |
| CVE-2026-54235 | Analyzed | 未確認 | CWE-1287 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, ll temperature validation gates use comparison operators (<, >), which silently evalua |
| CVE-2026-54236 | Analyzed | 未確認 | CWE-532 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, the fix for CVE-2026-22778, which introduced a sanitize_message helper that strips obj |
| CVE-2026-54250 | Awaiting Analysis | 未確認 | CWE-22 | K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a path traversal vulnerability exists in K3s's etcd snapshot d |
| CVE-2026-54257 | Deferred | 未確認 | CWE-120 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.1 until 42.3.3, Buffer performs incorrect byte length calculations |
| CVE-2026-54264 | Analyzed | 未確認 | CWE-200, CWE-359 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an inform |
| CVE-2026-54265 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, an issue |
| CVE-2026-54266 | Analyzed | 未確認 | CWE-328, CWE-345 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, Angular's |
| CVE-2026-54267 | Analyzed | 未確認 | CWE-471, CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, to optimi |
| CVE-2026-54268 | Analyzed | 未確認 | CWE-1333, CWE-400 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, a Denial |
| CVE-2026-54269 | Analyzed | 未確認 | CWE-674, CWE-754 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properti |
| CVE-2026-54270 | Analyzed | 未確認 | CWE-770 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a |
| CVE-2026-54271 | Analyzed | 未確認 | CWE-94 | protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.3.2 and 2.5.0, a previous fix for unsafe name handling in pbjs static / static-module code generation was inco |
| CVE-2026-54273 | Analyzed | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, no limit was present on the number of pipelined requests that could be queued. An a |
| CVE-2026-54274 | Analyzed | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible |
| CVE-2026-54275 | Analyzed | 未確認 | CWE-297 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the server_hostname TLS SNI check can be bypassed when an existing connection is re |
| CVE-2026-54276 | Analyzed | 未確認 | CWE-200, CWE-522, CWE-601 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-or |
| CVE-2026-54277 | Analyzed | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the |
| CVE-2026-54278 | Analyzed | 未確認 | CWE-409 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, during cleanup it is possible for a compressed request body to be decompressed into |
| CVE-2026-54279 | Analyzed | 未確認 | CWE-665 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with |
| CVE-2026-54280 | Analyzed | 未確認 | CWE-404 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, payload resources are not closed correctly when a client disconnects in the middle |
| CVE-2026-54281 | Deferred | 未確認 | CWE-863 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.24, an authentication bypass vulnerability exists in @nestjs/platform-fastify. When middle |
| CVE-2026-54282 | Analyzed | 未確認 | CWE-706 | Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebui |
| CVE-2026-54283 | Analyzed | 未確認 | CWE-770 | Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data |
| CVE-2026-54285 | Analyzed | 未確認 | CWE-770 | opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 2.8.0, W3CBaggagePropagator.extract() in @opentelemetry/core does not enforce size limits when parsing inbound bag |
| CVE-2026-54286 | Deferred | 未確認 | CWE-22 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on Windows hosts, an encoded backslash (%5C) in the request path decodes to |
| CVE-2026-54287 | Deferred | 未確認 | CWE-116 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda, the ALB single-header response and the VPC Lattice v2 respons |
| CVE-2026-54288 | Deferred | 未確認 | CWE-345 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, the Body Limit Middleware trusts the request's Content-Length header to deci |
| CVE-2026-54289 | Deferred | 未確認 | CWE-348 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda@Edge, CloudFront delivers a request header that appears more t |
| CVE-2026-54290 | Deferred | 未確認 | CWE-942 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, with credentials: true and no explicit origin (the default wildcard), the CO |
| CVE-2026-54292 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12074. Reason: This candidate is a duplicate of CVE-2026-12074. Notes: All CVE users should ref | |
| CVE-2026-54293 | Modified | 未確認 | CWE-22 | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10 |
| CVE-2026-54294 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12072. Reason: This candidate is a duplicate of CVE-2026-12072. Notes: All CVE users should ref | |
| CVE-2026-54295 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12061. Reason: This candidate is a duplicate of CVE-2026-12061. Notes: All CVE users should ref | |
| CVE-2026-54296 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12075. Reason: This candidate is a duplicate of CVE-2026-12075. Notes: All CVE users should ref | |
| CVE-2026-54297 | Modified | 未確認 | CWE-674, CWE-770 | Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the defau |
| CVE-2026-54298 | Modified | 未確認 | CWE-79 | Astro is a web framework. Prior to 6.4.6, the spreadAttributes function in Astro's server-side rendering pipeline iterates over object keys and passes them directly to addAttribute |
| CVE-2026-54299 | Analyzed | 未確認 | CWE-20, CWE-918 | Astro is a web framework. Prior to 6.4.6, Astro SSR apps with prerendered error pages (/404 or /500 using export const prerender = true) fetch those pages over HTTP at runtime when |
| CVE-2026-54300 | Deferred | 未確認 | CWE-918 | @astrojs/netlify is an adapter that allows Astro to deploy your hybrid or server rendered site to Netlify. Prior to 7.0.13, @astrojs/netlify converts Astro image.remotePatterns int |
| CVE-2026-54301 | Analyzed | 未確認 | CWE-79 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could configure a Respond to Webhook node |
| CVE-2026-54302 | Analyzed | 未確認 | CWE-79 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inject arbitrary JavaScript into th |
| CVE-2026-54303 | Analyzed | 未確認 | CWE-79 | n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response wit |
| CVE-2026-54304 | Analyzed | 未確認 | CWE-200 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with permission to create or modify workflows and access to a Secur |
| CVE-2026-54305 | Analyzed | 未確認 | CWE-200, CWE-284 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n |
| CVE-2026-54306 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-cont |
| CVE-2026-54307 | Analyzed | 未確認 | CWE-863 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials t |
| CVE-2026-54308 | Analyzed | 未確認 | CWE-290 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeTrigger node did not validate that inbound requests. As a res |
| CVE-2026-54309 | Analyzed | 未確認 | CWE-306 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint accepts session initialization |
| CVE-2026-54310 | Analyzed | 未確認 | CWE-89 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameter |
| CVE-2026-54311 | Analyzed | 未確認 | CWE-488 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used b |
| CVE-2026-54312 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution vi |
| CVE-2026-54313 | Analyzed | 未確認 | CWE-89 | n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Fin |
| CVE-2026-54314 | Analyzed | 未確認 | CWE-409 | n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing |
| CVE-2026-54316 | Analyzed | 未確認 | CWE-183, CWE-200, CWE-515 | Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that d |
| CVE-2026-54317 | Modified | 未確認 | CWE-200, CWE-306 | Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.6.0, the Konnected integration registers an HTTP endpoint, Konnected |
| CVE-2026-54318 | Analyzed | 未確認 | CWE-926 | Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no |
| CVE-2026-54319 | Deferred | 未確認 | CWE-22, CWE-250, CWE-269 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be |
| CVE-2026-54320 | Deferred | 未確認 | CWE-287, CWE-863 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declin |
| CVE-2026-54321 | Deferred | 未確認 | CWE-613, CWE-863 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from pub |
| CVE-2026-54322 | Deferred | 未確認 | CWE-639, CWE-862 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's organization role update and delete endpoint |
| CVE-2026-54323 | Deferred | 未確認 | CWE-295 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, the daemon's git clone implementation disabled TLS cer |
| CVE-2026-54324 | Deferred | 未確認 | CWE-639, CWE-863 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notific |
| CVE-2026-54325 | Deferred | 未確認 | CWE-829 | Pi is a minimal terminal coding harness. Pi before 0.79.0 loaded project-local configuration and resources from a repository's .pi directory without first asking the user to trust |
| CVE-2026-54326 | Deferred | 未確認 | CWE-79 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render session Markdown into a static HTML file. It did not consistently reject unsafe Markdown l |
| CVE-2026-54327 | Deferred | 未確認 | CWE-367, CWE-732 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi stored API keys and OAuth credentials in auth.json. A race condition in the file write path could briefly crea |
| CVE-2026-54328 | Deferred | 未確認 | CWE-379 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating syste |
| CVE-2026-54341 | Deferred | 未確認 | CWE-125 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack col |
| CVE-2026-54350 | Modified | 未確認 | CWE-89, CWE-943 | Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the backing MongoDB, CouchDB, Elas |
| CVE-2026-54351 | Analyzed | 未確認 | CWE-915 | Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request body into automation |
| CVE-2026-54352 | Analyzed | 未確認 | CWE-22, CWE-59 | Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a builder-uploaded .zip, extracts |
| CVE-2026-54353 | Analyzed | 未確認 | CWE-367, CWE-918 | Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbo |
| CVE-2026-54357 | Deferred | 未確認 | CWE-639, CWE-863 | An improper authorization vulnerability in MISP allowed an authenticated organization administrator to access or modify user settings belonging to site administrator accounts withi |
| CVE-2026-54358 | Deferred | 未確認 | CWE-863 | An incorrect authorization vulnerability in MISP allows an organization administrator to target site administrator accounts belonging to the same organization through the administr |
| CVE-2026-54359 | Deferred | 未確認 | CWE-1188, CWE-352 | MISP contains an insecure default configuration in which the Security.check_sec_fetch_site_header control is disabled. When this setting is disabled, state-changing requests such a |
| CVE-2026-54360 | Deferred | 未確認 | CWE-639 | A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the controller did not remove a user-supplied id field before s |
| CVE-2026-54361 | Deferred | 未確認 | CWE-639 | MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegations, and shadow attributes. Several controller actions accept |
| CVE-2026-54362 | Deferred | 未確認 | CWE-863 | An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organisa |
| CVE-2026-54369 | Deferred | 未確認 | CWE-59 | acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_f |
| CVE-2026-54370 | Deferred | 未確認 | CWE-367 | acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname co |
| CVE-2026-54371 | Deferred | 未確認 | CWE-59 | attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathna |
| CVE-2026-54386 | Deferred | 未確認 | CWE-79 | marimo before 0.23.9 contains a reflected cross-site scripting vulnerability in the notebook page that allows unauthenticated attackers to inject arbitrary JavaScript by exploiting |
| CVE-2026-54387 | Deferred | 未確認 | CWE-444 | Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend whi |
| CVE-2026-54388 | Deferred | 未確認 | CWE-444 | Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing values, forwarding all duplicate headers to th |
| CVE-2026-54390 | Deferred | 未確認 | CWE-1336 | JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsan |
| CVE-2026-54393 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint previously saved the user-controlled path value through setSett |
| CVE-2026-54394 | Deferred | 未確認 | CWE-22 | MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-controlled fields su |
| CVE-2026-54395 | Deferred | 未確認 | CWE-79 | MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inserted into an inline JavaScript handler using HTML escaping i |
| CVE-2026-54396 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdown was populate |
| CVE-2026-54397 | Deferred | 未確認 | CWE-863 | A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharing_gro |
| CVE-2026-54398 | Deferred | 未確認 | CWE-863 | An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with object editing permissions to assign a MISP object, or attributes contained within an ob |
| CVE-2026-54410 | Deferred | 未確認 | CWE-193, CWE-787 | nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthenticated attackers to write one |
| CVE-2026-54411 | Deferred | 未確認 | CWE-208 | Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that al |
| CVE-2026-54412 | Deferred | 未確認 | CWE-125, CWE-191 | LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflow in the mqtt_unpack_publish_response function in src/mqtt.c that allows a remo |
| CVE-2026-54413 | Deferred | 未確認 | CWE-125, CWE-191 | driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c that allows a remote una |
| CVE-2026-54414 | Deferred | 未確認 | CWE-22, CWE-434 | FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrato |
| CVE-2026-54415 | Deferred | 未確認 | CWE-269, CWE-862 | Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.acces |
| CVE-2026-54417 | Deferred | 未確認 | CWE-190, CWE-835 | An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite |
| CVE-2026-54419 | Deferred | 未確認 | CWE-89 | claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1c104212cd62be2bfca21e5) contains multiple unauthenticated SQ |
| CVE-2026-54420 | Analyzed | 掲載 | CWE-61 | LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting |
| CVE-2026-54421 | Deferred | 未確認 | CWE-212 | In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such |
| CVE-2026-54444 | Rejected | 未確認 | Rejected reason: ]** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-49489. Reason: This candidate is a duplicate of CVE-2026-49489. Notes: All CVE users should re | |
| CVE-2026-54445 | Deferred | 未確認 | CWE-1393, CWE-204 | vantage6 is an open-source infrastructure for privacy preserving analysis. Versions prior to 5.0.0 provide an initial user with username `root` and password `root`. This is not ide |
| CVE-2026-54448 | Analyzed | 未確認 | CWE-770, CWE-789 | Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attac |
| CVE-2026-54475 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to |
| CVE-2026-54479 | Deferred | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementati |
| CVE-2026-54512 | Analyzed | 未確認 | CWE-184, CWE-502 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's |
| CVE-2026-54513 | Modified | 未確認 | CWE-184 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTyp |
| CVE-2026-54514 | Analyzed | 未確認 | CWE-918 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeseria |
| CVE-2026-54515 | Analyzed | 未確認 | CWE-915 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerB |
| CVE-2026-54516 | Analyzed | 未確認 | CWE-915 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, POJOPropertiesCollector._ren |
| CVE-2026-54517 | Analyzed | 未確認 | CWE-863 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, in BeanDeserializer._deseria |
| CVE-2026-54518 | Analyzed | 未確認 | CWE-863 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, UnwrappedPropertyHandler.pro |
| CVE-2026-54530 | Analyzed | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires ext |
| CVE-2026-54531 | Analyzed | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires mer |
| CVE-2026-54533 | Deferred | 未確認 | CWE-284 | vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output fil |
| CVE-2026-54555 | Deferred | 未確認 | CWE-863 | rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the permission splitter did not conservatively split or reject several shell constru |
| CVE-2026-54557 | Deferred | 未確認 | CWE-22 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mise HTTP backend builds its install symlink destination from the raw resolved version string |
| CVE-2026-54573 | Deferred | 未確認 | CWE-863 | Outline is a service that allows for collaborative documentation. Prior to 1.8.0, the AuthenticationHelper.canAccess function uses ctx.originalUrl to verify if an API key or OAuth |
| CVE-2026-54588 | Deferred | 未確認 | CWE-20, CWE-601 | Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled `HTTP_HOST` request header as the authoritative |
| CVE-2026-54636 | Analyzed | 未確認 | CWE-78 | Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running as the Dokku user. An app.json cron command ut |
| CVE-2026-54639 | Deferred | 未確認 | CWE-1321 | Style Dictionary, a build system for creating cross-platform styles, has a prototype pollution vulnerability starting in version 4.3.0 and prior to version 5.4.4. Impact users have |
| CVE-2026-54651 | Analyzed | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires mer |
| CVE-2026-54665 | Analyzed | 未確認 | CWE-346 | Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating |
| CVE-2026-54672 | Analyzed | 未確認 | CWE-427 | electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_L |
| CVE-2026-54673 | Analyzed | 未確認 | CWE-200 | electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler (HttpExecutor.prepareRedirectUrlOptions) only stripped a credential heade |
| CVE-2026-54679 | Analyzed | 未確認 | CWE-190 | jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple overflowing and then causing a massive buffer overrun. Thi |
| CVE-2026-54686 | Deferred | 未確認 | CWE-78, CWE-88 | Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from |
| CVE-2026-54696 | Deferred | 未確認 | CWE-122, CWE-131, CWE-787 | Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is provided with an oversized streamed obj |
| CVE-2026-54699 | Deferred | 未確認 | CWE-116, CWE-78 | Warp is an agentic development environment. From 0.2024.03.12.08.02.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains an OS command injection vulnerability in the WSL URL |
| CVE-2026-54753 | Deferred | 未確認 | CWE-749, CWE-942 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 and 23.0.0-beta.2, the local HTTP server started by nx graph sent Access-Control-Allow-Ori |
| CVE-2026-54759 | Deferred | 未確認 | CWE-79 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute's HTML sanitizer does not remove <iframe> elements. Combined with the SiYuan Electron client's p |
| CVE-2026-54761 | Analyzed | 未確認 | CWE-284, CWE-863 | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.21 and 3.7.5, there is a high severity vulnerability in Traefik's Kubernetes Gateway provider affecting the crossPr |
| CVE-2026-54762 | Analyzed | 未確認 | CWE-636, CWE-693 | Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that causes |
| CVE-2026-54802 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions. |
| CVE-2026-54803 | Deferred | 未確認 | CWE-863 | Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions. |
| CVE-2026-54804 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in Melhor Envio <= 2.16.3 versions. |
| CVE-2026-54805 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions. |
| CVE-2026-54806 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions. |
| CVE-2026-54807 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions. |
| CVE-2026-54808 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection. This issue a |
| CVE-2026-54809 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme GIFT4U allows Blind SQL Injection. This issue affects GIFT4U: from |
| CVE-2026-54810 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Nexi XPay: from n/a thro |
| CVE-2026-54811 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP eMember < v10.9.4 versions. |
| CVE-2026-54812 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind S |
| CVE-2026-54813 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force SureDash allows Blind SQL Injection. This issue affects Sure |
| CVE-2026-54814 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Motors allows PHP Local File Inclusion. Thi |
| CVE-2026-54815 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cargo RD Cargo Shipping Location for WooCommerce allows Blind SQL Injection. |
| CVE-2026-54816 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced Ads allows Remote Code Inclusion. This issue affects Advanced Ads: from n/a throug |
| CVE-2026-54817 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MStore API: from n/a thr |
| CVE-2026-54818 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection. This issue affects |
| CVE-2026-54819 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webilia Inc. Listdom allows Blind SQL Injection. This issue affects Listdom: |
| CVE-2026-5482 | Deferred | 未確認 | CWE-434 | Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Executio |
| CVE-2026-54820 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions. |
| CVE-2026-54821 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. |
| CVE-2026-54822 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions. |
| CVE-2026-54823 | Deferred | 未確認 | CWE-94 | Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions. |
| CVE-2026-54824 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions. |
| CVE-2026-54825 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in wpDataTables <= 7.4 versions. |
| CVE-2026-54826 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions. |
| CVE-2026-54827 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions. |
| CVE-2026-54828 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Motors <= 1.4.109 versions. |
| CVE-2026-54829 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection. This issue |
| CVE-2026-54830 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions. |
| CVE-2026-54831 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions. |
| CVE-2026-54832 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. |
| CVE-2026-54833 | Deferred | 未確認 | CWE-321 | Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions. |
| CVE-2026-54834 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions. |
| CVE-2026-54835 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. |
| CVE-2026-54836 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection. This issue affects YMC Filter: from n/a thro |
| CVE-2026-54837 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions. |
| CVE-2026-54838 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions. |
| CVE-2026-54839 | Deferred | 未確認 | CWE-639 | Unauthenticated Sensitive Data Exposure in Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups <= 2.0.9 versions. |
| CVE-2026-54840 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Newsletters <= 4.13 versions. |
| CVE-2026-54841 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions. |
| CVE-2026-54842 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a thro |
| CVE-2026-54843 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in MDTF <= 1.3.7 versions. |
| CVE-2026-54844 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions. |
| CVE-2026-54845 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions. |
| CVE-2026-54846 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions. |
| CVE-2026-54847 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions. |
| CVE-2026-54848 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects APIExpe |
| CVE-2026-54849 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions. |
| CVE-2026-54888 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in leandrocp mdex allows denial of service via deeply nested Markdown input. mdex converts between an Elixir %MDEx.Document{} struct and Comra |
| CVE-2026-54889 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'E |
| CVE-2026-54892 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause denial of service. Plug.Conn.Query.decode/4 (and Plug.Conn. |
| CVE-2026-54904 | Modified | 未確認 | CWE-835 | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NA |
| CVE-2026-54905 | Analyzed | 未確認 | CWE-128 | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read loc |
| CVE-2026-54906 | Analyzed | 未確認 | CWE-414, CWE-667 | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock |
| CVE-2026-54911 | Analyzed | 未確認 | CWE-20 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps() (or ujson.dump() or ujson.encode()) have a reject_bytes |
| CVE-2026-54917 | Analyzed | 未確認 | CWE-22 | SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway construc |
| CVE-2026-5497 | Modified | 未確認 | CWE-400, CWE-770 | vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` me |
| CVE-2026-55069 | Analyzed | 未確認 | CWE-916 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orche |
| CVE-2026-55092 | Analyzed | 未確認 | CWE-22 | Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destinat |
| CVE-2026-5513 | Deferred | 未確認 | CWE-79 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versio |
| CVE-2026-55180 | Analyzed | 未確認 | CWE-200, CWE-201, CWE-522 | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm and pacquet expanded ${ENV_VAR} placeholders from repository-controlled .npmrc and pnpm-workspace.yaml into registry re |
| CVE-2026-55188 | Deferred | 未確認 | CWE-200, CWE-522, CWE-862, CWE-863 | RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, RustFS contains an authorization bypass in the bucket replication admin API. The |
| CVE-2026-55189 | Deferred | 未確認 | CWE-862, CWE-863 | RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, when the FTP frontend is enabled, the FTP read and probe handlers dispatch direc |
| CVE-2026-55196 | Deferred | 未確認 | CWE-306 | Hermes WebUI before 0.51.409 contains an authentication bypass vulnerability in passkey registration endpoints that allows unauthenticated remote attackers to register arbitrary pa |
| CVE-2026-55197 | Deferred | 未確認 | CWE-639 | Hermes WebUI before 0.51.443 contains a broken access control vulnerability in the /api/session endpoint that allows authenticated users to disclose cross-profile session transcrip |
| CVE-2026-55198 | Deferred | 未確認 | CWE-639 | Hermes WebUI before 0.51.443 contains an authorization bypass vulnerability in the session export endpoint that allows authenticated users to access sessions from other profiles. T |
| CVE-2026-55199 | Analyzed | 未確認 | CWE-835 | libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SSH_MSG_EXT_INFO handler in src/packet.c that allows a malicio |
| CVE-2026-55200 | Modified | 未確認 | CWE-680 | libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote at |
| CVE-2026-55201 | Awaiting Analysis | 未確認 | CWE-22 | Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the download_dir() function that allows a rogue or compromised remote Windows server to |
| CVE-2026-55202 | Deferred | 未確認 | CWE-290 | Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access the stats page |
| CVE-2026-55203 | Analyzed | 未確認 | CWE-190 | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record hea |
| CVE-2026-55204 | Analyzed | 未確認 | CWE-476 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return va |
| CVE-2026-55205 | Deferred | 未確認 | CWE-770 | Hermes WebUI before 0.51.468 contains a resource exhaustion vulnerability in the unauthenticated POST /api/onboarding/oauth/start endpoint that allows unbounded accumulation of in- |
| CVE-2026-55223 | Deferred | 未確認 | CWE-502, CWE-915 | c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0, c3p0 in combination with other libraries, can compose to a "sink" for deserialization gadgets. The JDBC sp |
| CVE-2026-55237 | Deferred | 未確認 | CWE-601, CWE-87 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62 have a DOM-based Cross-Site Scri |
| CVE-2026-55249 | Analyzed | 未確認 | CWE-78 | @rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their RTK equivalents. In 1.0.0, the @rtk-ai/rtk-rewrite OpenClaw plugin passes attac |
| CVE-2026-55255 | Analyzed | 掲載 | CWE-639 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoin |
| CVE-2026-55276 | Analyzed | 未確認 | CWE-670 | Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xm |
| CVE-2026-55388 | Deferred | 未確認 | CWE-1321, CWE-94 | piscina is a node.js worker pool implementation. Prior to 6.0.0-rc.2, 5.2.0, and 4.9.3, piscina's constructor and run() paths read the filename option via plain member access. Both |
| CVE-2026-55392 | Deferred | 未確認 | CWE-1284 | NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock before bit-shift operations. Atta |
| CVE-2026-55409 | Deferred | 未確認 | CWE-79 | Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field rendered its raw state without sanitizin |
| CVE-2026-55411 | Deferred | 未確認 | CWE-639, CWE-863 | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.1780-lts, the authenticated endpoint P |
| CVE-2026-55412 | Deferred | 未確認 | CWE-918 | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAP |
| CVE-2026-55413 | Deferred | 未確認 | CWE-94 | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, any authenticated user with b |
| CVE-2026-55423 | Analyzed | 未確認 | CWE-613 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unles |
| CVE-2026-55439 | Deferred | 未確認 | CWE-22 | Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download endpoint allows authenticated administrators to read arbitrary |
| CVE-2026-55441 | Deferred | 未確認 | CWE-732, CWE-78, CWE-94 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task |
| CVE-2026-55443 | Analyzed | 未確認 | CWE-22, CWE-59 | LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do n |
| CVE-2026-55446 | Analyzed | 未確認 | CWE-400 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v1/files/upload/ request without any authentication toke |
| CVE-2026-55447 | Analyzed | 未確認 | CWE-200, CWE-61 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the nod |
| CVE-2026-55448 | Deferred | 未確認 | CWE-78 | mise manages dev tools like node, python, cmake, and terraform. From 2026.3.15 until 2026.6.4, mise loads github.credential_command from local project config before any trust decis |
| CVE-2026-55450 | Analyzed | 未確認 | CWE-200, CWE-306, CWE-400 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitat |
| CVE-2026-55454 | Analyzed | 未確認 | CWE-1188, CWE-749 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has no authentication by default — i |
| CVE-2026-55455 | Analyzed | 未確認 | CWE-918 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the outbound HTTP host filter applied by WebClientUtils (used by the REST API and GraphQ |
| CVE-2026-55477 | Deferred | 未確認 | CWE-73 | 3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file wr |
| CVE-2026-55487 | Analyzed | 未確認 | CWE-346, CWE-693, CWE-829 | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized text from git, URL, tarball, file, and other opaque locators. |
| CVE-2026-55488 | Deferred | 未確認 | CWE-22 | motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Versions prior to 0.44.0 contain an ab |
| CVE-2026-55517 | Analyzed | 未確認 | CWE-248 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.5, a Deno program that opens a client WebSocket connection could be crashed by the remote server. While hand |
| CVE-2026-55568 | Analyzed | 未確認 | CWE-311, CWE-319, CWE-636 | Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, in certain configurations, traffic expected to be protected by TLS on the hop to the proxy is transmitted in cleartext. Pr |
| CVE-2026-55570 | Deferred | 未確認 | CWE-116, CWE-79, CWE-94 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape the untrusted fields (name, version, author, description) when they are serialized |
| CVE-2026-55583 | Deferred | 未確認 | CWE-639 | Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.9.0, Twenty was vulnerable to a cross-workspace insecure direct object reference (IDOR) in the |
| CVE-2026-55599 | Analyzed | 未確認 | CWE-918 | phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an application validates an untrusted X.509 certificate with phpseclib, X509::va |
| CVE-2026-55602 | Analyzed | 未確認 | CWE-187, CWE-20 | http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router proxy-table entries as host, path, or hos |
| CVE-2026-55603 | Analyzed | 未確認 | CWE-93 | http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library's documented helper for re-emitting a request body that wa |
| CVE-2026-55607 | Analyzed | 未確認 | CWE-22, CWE-59, CWE-78 | Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside th |
| CVE-2026-55611 | Deferred | 未確認 | CWE-639 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.11.1 until 1.14.1, userId/workspaceId scoping to |
| CVE-2026-55653 | Modified | 未確認 | CWE-415 | A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Fede |
| CVE-2026-55654 | Modified | 未確認 | CWE-125 | A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicat |
| CVE-2026-55655 | Modified | 未確認 | CWE-923 | A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred a |
| CVE-2026-55666 | Deferred | 未確認 | CWE-287, CWE-288 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, in apps/meteor/app/apple/server/l |
| CVE-2026-55667 | Deferred | 未確認 | CWE-22, CWE-59 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.16, a scoped, non-admin File |
| CVE-2026-55677 | Deferred | 未確認 | CWE-22 | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (pr |
| CVE-2026-55686 | Analyzed | 未確認 | CWE-61 | Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory |
| CVE-2026-55693 | Analyzed | 未確認 | CWE-787 | Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by w |
| CVE-2026-55697 | Analyzed | 未確認 | CWE-494, CWE-78, CWE-829 | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can install configDependencies declared in pnpm-workspace.yaml before command dispatch. Before the patch, a repository |
| CVE-2026-55698 | Analyzed | 未確認 | CWE-345, CWE-494, CWE-829 | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can persist package-manager bootstrap metadata in the first YAML document of pnpm-lock.yaml. Before the patch, direct p |
| CVE-2026-55699 | Analyzed | 未確認 | CWE-22, CWE-73 | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Manifest bin object keys such as "", ".", and ".." passed pnpm's bin-name guard. When a malicious package was installed glob |
| CVE-2026-55700 | Analyzed | 未確認 | CWE-22, CWE-73 | pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-controlled package name and version fields. A crafted manifest cou |
| CVE-2026-55706 | Analyzed | 未確認 | CWE-1284 | sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths. |
| CVE-2026-55721 | Deferred | 未確認 | CWE-89 | Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed by the login.pl and debug.pl scripts. The cookie value is incorporated directly into |
| CVE-2026-55736 | Deferred | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a private action argument that is |
| CVE-2026-55738 | Deferred | 未確認 | CWE-121, CWE-170 | A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR heade |
| CVE-2026-55740 | Deferred | 未確認 | CWE-89 | Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The bu |
| CVE-2026-55741 | Deferred | 未確認 | CWE-352 | Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration configuration handler. In system/admin/admin.config.php, the config |
| CVE-2026-55742 | Deferred | 未確認 | CWE-352 | Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.php, the rights update |
| CVE-2026-55743 | Deferred | 未確認 | CWE-184, CWE-78 | The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS comman |
| CVE-2026-55744 | Deferred | 未確認 | CWE-352 | Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Personal File Storage (PFS) module. In modules/pfs/inc/pfs.main.php, the file uplo |
| CVE-2026-55745 | Deferred | 未確認 | CWE-352 | Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Personal File Storage (PFS) module. In modules/pfs/inc/pfs.editfolder.php, the fol |
| CVE-2026-55746 | Deferred | 未確認 | CWE-79 | Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to stored Cross-Site Scripting in the Personal File Storage (PFS) module. A folder title (pff_title) is imported with t |
| CVE-2026-55748 | Analyzed | 未確認 | CWE-78 | OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this |
| CVE-2026-55759 | Deferred | 未確認 | CWE-287, CWE-294 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, Rocket.Chat's Apple Sign-In handl |
| CVE-2026-55762 | Deferred | 未確認 | CWE-862 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, the POST /api/v1/fingerprint REST |
| CVE-2026-55766 | Analyzed | 未確認 | CWE-113, CWE-93 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.1, guzzlehttp/psr7 did not reject CR/LF characters in certain first-party HTTP start-line field |
| CVE-2026-55767 | Modified | 未確認 | CWE-1286, CWE-346 | Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, CookieJar incorrectly accepts cookies with a dot-only Domain attribute and whitespace-padded variants. SetCookie::matchesD |
| CVE-2026-55838 | Deferred | 未確認 | CWE-862 | RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.7 and earlier, the real-time metrics endpoint at /rustfs/admin/v3/metrics is accessible to any valid IAM |
| CVE-2026-55844 | Deferred | 未確認 | CWE-319 | Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS companion app ignores the SSID allowlist for internal n |
| CVE-2026-5589 | Analyzed | 未確認 | CWE-787 | An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write. When CONFIG_BT_MESH_O |
| CVE-2026-55892 | Analyzed | 未確認 | CWE-787 | Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter whil |
| CVE-2026-55895 | Analyzed | 未確認 | CWE-78, CWE-94 | Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/o |
| CVE-2026-55955 | Analyzed | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 1 |
| CVE-2026-55956 | Analyzed | 未確認 | CWE-285 | Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of t |
| CVE-2026-55957 | Analyzed | 未確認 | CWE-304 | Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate withou |
| CVE-2026-55958 | Analyzed | 未確認 | CWE-393, CWE-787 | Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but fai |
| CVE-2026-55960 | Analyzed | 未確認 | CWE-295 | Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation. A raw public key has no chain, so ParseCertRelative() accepts it with |
| CVE-2026-55961 | Analyzed | 未確認 | CWE-347 | wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains no signer. Such an object has empty signerInfos, so the underlying signed-data ve |
| CVE-2026-55962 | Analyzed | 未確認 | CWE-287 | TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The po |
| CVE-2026-55964 | Analyzed | 未確認 | CWE-295 | Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have the keyCertSign key usage when a Key Usage extension is p |
| CVE-2026-55967 | Analyzed | 未確認 | CWE-323 | AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reus |
| CVE-2026-55975 | Deferred | 未確認 | CWE-78 | A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device's certificate generation interface, which are inco |
| CVE-2026-56005 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue a |
| CVE-2026-56006 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions. |
| CVE-2026-56007 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP Ocean Product Sharing allows Stored XSS. This issue affects Ocean Pro |
| CVE-2026-56008 | Deferred | 未確認 | CWE-266 | Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions. |
| CVE-2026-56009 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricksable for Bricks Builder allows Stored XSS. This issue affects Bricksabl |
| CVE-2026-56010 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. |
| CVE-2026-56011 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions. |
| CVE-2026-56012 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This issue |
| CVE-2026-56013 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions. |
| CVE-2026-56014 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider master-slider allows Reflected XSS.This issue affects Mas |
| CVE-2026-56017 | Deferred | 未確認 | CWE-125, CWE-476 | JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division di |
| CVE-2026-56018 | Deferred | 未確認 | CWE-400, CWE-401 | JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) the cleanup frees only the Node |
| CVE-2026-56020 | Awaiting Analysis | 未確認 | CWE-290 | The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote att |
| CVE-2026-56021 | Analyzed | 未確認 | CWE-185, CWE-777 | Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern. |
| CVE-2026-56022 | Analyzed | 未確認 | CWE-308 | Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.64 |
| CVE-2026-56023 | Deferred | 未確認 | CWE-862 | Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions. |
| CVE-2026-56024 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal WP EasyPay allows Cross Site Request Forgery. This issue affects WP EasyPay: from n/a through 4.5.0. |
| CVE-2026-56025 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions. |
| CVE-2026-56026 | Deferred | 未確認 | CWE-918 | Subscriber Server Side Request Forgery (SSRF) in utm.codes <= 1.9.0 versions. |
| CVE-2026-56027 | Deferred | 未確認 | CWE-434 | Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions. |
| CVE-2026-56028 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Templates <= 1.4.9 versions. |
| CVE-2026-56029 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions. |
| CVE-2026-56030 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions. |
| CVE-2026-56031 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. |
| CVE-2026-56032 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions. |
| CVE-2026-56033 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions. |
| CVE-2026-56034 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions. |
| CVE-2026-56035 | Deferred | 未確認 | CWE-1284 | Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions. |
| CVE-2026-56036 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions. |
| CVE-2026-56038 | Deferred | 未確認 | CWE-862 | Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions. |
| CVE-2026-56039 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. |
| CVE-2026-56040 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. |
| CVE-2026-56041 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions. |
| CVE-2026-56042 | Deferred | 未確認 | CWE-79 | Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions. |
| CVE-2026-56043 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions. |
| CVE-2026-56044 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions. |
| CVE-2026-56045 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions. |
| CVE-2026-56046 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions. |
| CVE-2026-56047 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. |
| CVE-2026-56048 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions. |
| CVE-2026-56049 | Deferred | 未確認 | CWE-94 | Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions. |
| CVE-2026-56050 | Deferred | 未確認 | CWE-284 | Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PPOM for WooCom |
| CVE-2026-56051 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions. |
| CVE-2026-56052 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue |
| CVE-2026-56053 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. |
| CVE-2026-56054 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions. |
| CVE-2026-56055 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in RealHomes <= 4.5.3 versions. |
| CVE-2026-56057 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. |
| CVE-2026-56058 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions. |
| CVE-2026-56059 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions. |
| CVE-2026-56060 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions. |
| CVE-2026-56061 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions. |
| CVE-2026-56062 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions. |
| CVE-2026-56063 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. |
| CVE-2026-56064 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Tourfic <= 2.22.5 versions. |
| CVE-2026-56066 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions. |
| CVE-2026-56067 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. |
| CVE-2026-56068 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions. |
| CVE-2026-56069 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions. |
| CVE-2026-56070 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions. |
| CVE-2026-56071 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. |
| CVE-2026-56072 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions. |
| CVE-2026-56073 | Deferred | 未確認 | CWE-345 | Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypass email verification by modifying server responses. Attacke |
| CVE-2026-56074 | Deferred | 未確認 | CWE-863 | PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequent execute_command calls to bypass approval prompts. Attack |
| CVE-2026-56075 | Deferred | 未確認 | CWE-863 | PraisonAI before 4.5.128 contains an arbitrary shell command execution vulnerability where the UI modules hardcode approval_mode to auto, overriding administrator configuration fro |
| CVE-2026-56076 | Deferred | 未確認 | CWE-942 | PraisonAI before 1.5.128 contains a cross-origin agent execution vulnerability in the AGUI endpoint that allows remote attackers to trigger arbitrary agent execution. The POST /agu |
| CVE-2026-56077 | Deferred | 未確認 | CWE-668 | PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attackers to access sensitive data by registering agents wit |
| CVE-2026-56078 | Deferred | 未確認 | CWE-22 | PraisonAI before 1.5.115 contains a path traversal vulnerability in MultiAgentMonitor that fails to sanitize agent IDs when building file paths. Attackers can include traversal seq |
| CVE-2026-56079 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains a cross-tenant authorization bypass vulnerability in PostgREST endpoints that allows org-scoped read API keys to access other tenants' webhook secret |
| CVE-2026-56080 | Deferred | 未確認 | CWE-287 | Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and successfully changes their password to a compliant one, the |
| CVE-2026-56081 | Deferred | 未確認 | CWE-640 | Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. |
| CVE-2026-56082 | Deferred | 未確認 | CWE-284 | Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted to |
| CVE-2026-56091 | Deferred | 未確認 | CWE-289 | When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to |
| CVE-2026-56099 | Analyzed | 未確認 | CWE-125 | OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attackers t |
| CVE-2026-56104 | Deferred | 未確認 | CWE-862 | Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid ses |
| CVE-2026-56109 | Awaiting Analysis | 未確認 | CWE-415 | The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by su |
| CVE-2026-56111 | Awaiting Analysis | 未確認 | CWE-129 | Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESH_BED_LEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that a |
| CVE-2026-56113 | Analyzed | 未確認 | CWE-416 | dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that allows unauthenticated same-link attackers to crash the daemon by sending a crafte |
| CVE-2026-56114 | Analyzed | 未確認 | CWE-787 | dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-l |
| CVE-2026-56115 | Analyzed | 未確認 | CWE-862 | Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role e |
| CVE-2026-56116 | Analyzed | 未確認 | CWE-401 | dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same |
| CVE-2026-56117 | Analyzed | 未確認 | CWE-416 | dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged atta |
| CVE-2026-56118 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56119 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56120 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-56784. | |
| CVE-2026-56121 | Deferred | 未確認 | CWE-502 | Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRP |
| CVE-2026-56122 | Deferred | 未確認 | CWE-22 | Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-d |
| CVE-2026-56123 | Analyzed | 未確認 | CWE-122 | socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploitin |
| CVE-2026-56124 | Deferred | 未確認 | CWE-359, CWE-497 | phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database ta |
| CVE-2026-56129 | Deferred | 未確認 | CWE-782 | Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrat |
| CVE-2026-56130 | Deferred | 未確認 | CWE-294 | "Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expirat |
| CVE-2026-56131 | Analyzed | 未確認 | CWE-416 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar |
| CVE-2026-56132 | Analyzed | 未確認 | CWE-821 | In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sha |
| CVE-2026-56137 | Deferred | 未確認 | CWE-78 | RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be e |
| CVE-2026-56138 | Deferred | 未確認 | CWE-22 | AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query parameters and, prior to |
| CVE-2026-56141 | Analyzed | 未確認 | CWE-338 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible |
| CVE-2026-56142 | Analyzed | 未確認 | CWE-915 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts |
| CVE-2026-56208 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass |
| CVE-2026-56209 | Awaiting Analysis | 未確認 | CWE-787 | An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control fun |
| CVE-2026-56210 | Awaiting Analysis | 未確認 | CWE-125 | A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control fu |
| CVE-2026-56211 | Awaiting Analysis | 未確認 | CWE-787 | A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) l |
| CVE-2026-56212 | Deferred | 未確認 | CWE-269 | Capgo before 12.128.2 contains an authentication logic flaw: a user with permission to manage team or organization security settings can enable mandatory two-factor authentication |
| CVE-2026-56213 | Deferred | 未確認 | CWE-862 | Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsert_version_meta SECURITY DEFINER function exposed via PostgREST RPC, allowing unauthenticated |
| CVE-2026-56214 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC endpoints is_trial_org and is_paying_org that allows unauthenticated attackers to e |
| CVE-2026-56215 | Deferred | 未確認 | CWE-639 | Capgo before 12.128.12 allows authenticated users to modify their mutable public.users.email to arbitrary addresses, which the SSO provisioning endpoint trusts as an account-merge |
| CVE-2026-56216 | Deferred | 未確認 | CWE-269 | Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functions/v1/apikey endpoint that allows app-limited API keys to mint unrestricted keys by setting empt |
| CVE-2026-56218 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and |
| CVE-2026-56219 | Deferred | 未確認 | CWE-287 | Capgo before 12.128.2 contains a NULL-auth bypass vulnerability in the public.get_org_user_access_rbac function that allows unauthenticated attackers to retrieve RBAC role bindings |
| CVE-2026-56221 | Deferred | 未確認 | CWE-89 | Cap-go before 12.128.2 contains multiple SQL injection vulnerabilities in cloudflare.ts where user-controlled values from API request bodies are interpolated directly into SQL quer |
| CVE-2026-56222 | Deferred | 未確認 | CWE-639 | Capgo before 12.128.2 contains an authorization bypass vulnerability in POST /private/role_bindings that fails to verify app_id ownership during app-scoped role binding creation. A |
| CVE-2026-56223 | Deferred | 未確認 | CWE-287 | Capgo before 12.128.2 contains a cross-domain SSO account takeover vulnerability in the provision-user endpoint that allows attackers to merge arbitrary victim accounts based on em |
| CVE-2026-56224 | Deferred | 未確認 | CWE-384 | Capgo console.capgo.app/login before 12.128.2 accepts access_token and refresh_token in URL query parameters, automatically authenticating users without confirmation. Attackers can |
| CVE-2026-56225 | Deferred | 未確認 | CWE-269 | Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (get/put/delete/post). API keys created with mode=all but restricted |
| CVE-2026-56227 | Deferred | 未確認 | CWE-918 | Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopback and internal addresses. Organization admins can configure |
| CVE-2026-56228 | Deferred | 未確認 | CWE-20 | Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy configuration. An authenticated organization administrator can se |
| CVE-2026-56229 | Deferred | 未確認 | CWE-639 | Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to differen |
| CVE-2026-56230 | Deferred | 未確認 | CWE-639 | Capgo before 12.128.2 contains a broken object level authorization vulnerability in middlewareKey() that accepts the client-controlled x-limited-key-id header without validating ow |
| CVE-2026-56231 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains a broken object level authorization (BOLA) vulnerability in the POST /build/start/:jobId and POST /build/cancel/:jobId endpoints. The handlers author |
| CVE-2026-56232 | Deferred | 未確認 | CWE-863 | Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps constraints on subkeys provided via x-limited-key-id header in middlewareKey function. Attackers can bypa |
| CVE-2026-56233 | Deferred | 未確認 | CWE-22 | Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticated users with build permissions to bypass upload restrictions. Atta |
| CVE-2026-56234 | Deferred | 未確認 | CWE-307 | Capgo before 12.128.2 contains a credential validation vulnerability in the POST /functions/v1/private/validate_password_compliance endpoint that is callable using only the public |
| CVE-2026-56235 | Deferred | 未確認 | CWE-200 | Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC functions (get_app_metrics, get_global_metrics, get_total_metrics) that are granted |
| CVE-2026-56236 | Deferred | 未確認 | CWE-59 | Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create |
| CVE-2026-56237 | Deferred | 未確認 | CWE-287 | Capgo before 12.128.2 contains a broken authentication vulnerability in its API key generation mechanism. API keys are exposed in frontend requests, and the backend fails to valida |
| CVE-2026-56239 | Deferred | 未確認 | CWE-269 | Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY DEFINER function, which performs sensitive billing operatio |
| CVE-2026-56242 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns the owning user_id for supplied API keys, creating an API key |
| CVE-2026-56243 | Deferred | 未確認 | CWE-288 | Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header despite enforce_hashed_ap |
| CVE-2026-56244 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 allows non-admin API keys to read webhook signing secrets via Supabase REST due to insufficient row-level security policies on the webhooks table. Attackers c |
| CVE-2026-56245 | Deferred | 未確認 | CWE-269 | Supabase Capgo before 12.128.2 contains an authorization bypass vulnerability in the SECURITY DEFINER record_build_time RPC function that allows unauthenticated attackers to insert |
| CVE-2026-56247 | Deferred | 未確認 | CWE-266 | Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without validating role scope compatibility, including to pending invitees. Attackers can pre-s |
| CVE-2026-56248 | Deferred | 未確認 | CWE-400 | Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the audit_logs table's Row-Level Security (RLS) policy when a |
| CVE-2026-56249 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing thei |
| CVE-2026-56251 | Deferred | 未確認 | CWE-266 | Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users to elevate privileges from admin to super_admin. Attackers |
| CVE-2026-56253 | Deferred | 未確認 | CWE-284 | Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that allows unauthenticated attackers to enumerate organization m |
| CVE-2026-56255 | Deferred | 未確認 | CWE-770 | Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo |
| CVE-2026-56256 | Deferred | 未確認 | CWE-602 | Capgo before 12.128.2 enforces mandatory two-factor authentication only at the UI level. Sensitive Organization (ORG) management API endpoints (e.g., editing organization details, |
| CVE-2026-56257 | Deferred | 未確認 | CWE-284 | Capgo before 12.128.2 allows direct patching of public.apps.owner_org through PostgREST, bypassing the transfer_app() workflow and creating split-brain ownership. Attackers can dir |
| CVE-2026-56258 | Analyzed | 未確認 | CWE-22 | Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended d |
| CVE-2026-56262 | Analyzed | 未確認 | CWE-306 | Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote |
| CVE-2026-56263 | Analyzed | 未確認 | CWE-79 | Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl URLs and error messages via innerHTML without escaping. An at |
| CVE-2026-56264 | Analyzed | 未確認 | CWE-94 | Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplied J |
| CVE-2026-56265 | Analyzed | 未確認 | CWE-798 | Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can fo |
| CVE-2026-56266 | Analyzed | 未確認 | CWE-918 | Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/stream, /md, and /llm endpoints that fetch arbitrary user-supplied URLs without val |
| CVE-2026-56267 | Deferred | 未確認 | CWE-200 | Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII to unauthenti |
| CVE-2026-56268 | Analyzed | 未確認 | CWE-863 | Flowise before 3.1.2 contains an information disclosure vulnerability in the /api/v1/chatflows/apikey/:apikey endpoint. When the keyonly query parameter is omitted (the default), t |
| CVE-2026-56269 | Analyzed | 未確認 | CWE-798 | Flowise before 3.1.0 (npm package flowise, versions 3.0.13 and earlier) uses a weak hardcoded default value 'Secre$t' for the TOKEN_HASH_SECRET environment variable in packages/ser |
| CVE-2026-56270 | Analyzed | 未確認 | CWE-306 | Flowise before 3.1.0 (versions 3.0.13 and earlier) contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint that allows unauthenticated users to retrieve |
| CVE-2026-56272 | Analyzed | 未確認 | CWE-916 | Flowise before 3.0.13 uses bcrypt with default salt rounds of 5, providing only 32 iterations instead of the OWASP-recommended minimum of 10 rounds. Attackers can crack password ha |
| CVE-2026-56274 | Analyzed | 未確認 | CWE-78 | Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to incomplete command-flag validation and a regex bypass in local f |
| CVE-2026-56275 | Analyzed | 未確認 | CWE-918 | Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet address |
| CVE-2026-56276 | Deferred | 未確認 | CWE-915 | Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint that allows authenticated users to directly modify the credential field without valid |
| CVE-2026-56277 | Analyzed | 未確認 | CWE-346 | Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to-speech (TTS) generation endpoint (packages/server/src/controllers/text-to-speech/in |
| CVE-2026-56278 | Analyzed | 未確認 | CWE-798 | Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-session middleware when the EXPRESS_SESSION_SECRET envi |
| CVE-2026-56280 | Deferred | 未確認 | CWE-862 | Cap-go before 12.128.2 contains a privilege inversion vulnerability in GET /build/logs/:jobId that allows read-only API key holders to cancel running native builds. The endpoint re |
| CVE-2026-56282 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /replication endpoint that exposes internal PostgreSQL replication telemetry including |
| CVE-2026-56285 | Deferred | 未確認 | CWE-1188, CWE-918 | Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute va |
| CVE-2026-56286 | Deferred | 未確認 | CWE-306 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the account deletion endpoint that allows deletion without password re-authentication or secondary verifica |
| CVE-2026-56290 | Analyzed | 掲載 | CWE-434 | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitra |
| CVE-2026-56294 | Deferred | 未確認 | CWE-287 | capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject parameters. A |
| CVE-2026-56295 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-expiring API keys to bypass the require_apikey_expiration organ |
| CVE-2026-56299 | Deferred | 未確認 | CWE-306 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId/* endpoint that allows unauthenticated attackers to trigger consistent 500 errors. |
| CVE-2026-56300 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains unauthenticated security definer RPC functions get_user_id and get_org_perm_for_apikey that expose API key validity oracles and user UUID disclosure. |
| CVE-2026-56301 | Analyzed | 未確認 | CWE-276 | Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to an abstract-namespace Unix socket witho |
| CVE-2026-56302 | Deferred | 未確認 | CWE-284 | Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and delete stored app icons. |
| CVE-2026-56304 | Modified | 未確認 | CWE-502 | picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class |
| CVE-2026-56306 | Deferred | 未確認 | CWE-20 | Capgo before 12.128.2 contains a weak parsing vulnerability in the x-limited-key-id header that allows attackers to bypass subkey enforcement by submitting malformed values, zero, |
| CVE-2026-56307 | Deferred | 未確認 | CWE-670 | Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allows authenticated attackers to cau |
| CVE-2026-56310 | Deferred | 未確認 | CWE-285 | Cap-go before 12.128.2 contains an authorization bypass vulnerability in the GET /organization/members endpoint that allows org-limited API keys to bypass limited_to_orgs restricti |
| CVE-2026-56311 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.get_current_plan_max_org RPC function that allows unauthenticated attackers to retrieve arbitrary |
| CVE-2026-56314 | Deferred | 未確認 | CWE-672 | Capgo before 12.128.12 fails to filter deleted app versions when joining channels during /updates resolution, allowing deleted bundles to remain selectable. Attackers can continue |
| CVE-2026-56315 | Deferred | 未確認 | CWE-184 | picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib) exposing eight functi |
| CVE-2026-56316 | Deferred | 未確認 | CWE-203 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint that allows unauthenticated attackers to enumerate valid buil |
| CVE-2026-56317 | Analyzed | 未確認 | CWE-79 | Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript component that writes slot content to innerHTML without escaping. |
| CVE-2026-56318 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the /private/validate_password_compliance endpoint that returns different error responses for malformed, n |
| CVE-2026-56319 | Deferred | 未確認 | CWE-203 | Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that allows app-limited API keys to distinguish existing sibling |
| CVE-2026-56320 | Deferred | 未確認 | CWE-285 | Capgo before 12.128.2 contains an authorization flaw in POST /private/create_device that accepts a caller-supplied org_id parameter without validating it matches the target app's o |
| CVE-2026-56321 | Deferred | 未確認 | CWE-306 | Capgo (backend Supabase edge functions) before 12.128.2 does not apply the global authentication middleware to the GET /private/role_bindings/:org_id endpoint, unlike the POST and |
| CVE-2026-56322 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /updates endpoint that resolves the defaultChannel parameter before enforcing privacy |
| CVE-2026-56323 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channel_self endpoint that allows unauthenticated attackers to enumerate non-public chan |
| CVE-2026-56324 | Deferred | 未確認 | CWE-770 | Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channel_self endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled devi |
| CVE-2026-56325 | Deferred | 未確認 | CWE-20 | Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act as |
| CVE-2026-56326 | Analyzed | 未確認 | CWE-601 | Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 contain a server-side open redirect vulnerability in navigateTo that fails to properly validate path-normalized payloads like |
| CVE-2026-56327 | Deferred | 未確認 | CWE-203 | Capgo before 12.128.2 contains an information disclosure vulnerability in the public.invite_user_to_org RPC function that allows unauthenticated attackers to enumerate organization |
| CVE-2026-56328 | Deferred | 未確認 | CWE-670 | Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unnamed /updates requests without defaultChannel implicitly res |
| CVE-2026-56330 | Deferred | 未確認 | CWE-601 | Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept unvalidated callbackUrl, successUrl, and cancelUrl paramete |
| CVE-2026-56331 | Deferred | 未確認 | CWE-209 | Capgo before 12.128.2 contains improper error handling in the /private/accept_invitation endpoint that returns HTTP 500 instead of safe 4xx errors when magic_invite_string is inval |
| CVE-2026-56332 | Deferred | 未確認 | CWE-601 | Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirmatio |
| CVE-2026-56333 | Deferred | 未確認 | CWE-20 | Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organization security settings that allows authenticated org admins to persist invalid security poli |
| CVE-2026-56334 | Deferred | 未確認 | CWE-284 | Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table, preventing API-key and anonymous access from persisting builder status updates. Attack |
| CVE-2026-56337 | Deferred | 未確認 | CWE-200 | Capgo before 12.128.2 contains an information disclosure vulnerability in the public.exist_app_v2 RPC function that allows unauthenticated attackers to enumerate app_ids by calling |
| CVE-2026-56338 | Deferred | 未確認 | CWE-703 | Capgo before 12.128.2 contains a denial of service vulnerability in the /auth/v1/otp endpoint that prevents email verification for two-factor authentication due to captcha validati |
| CVE-2026-56340 | Modified | 未確認 | CWE-20, CWE-787 | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, a |
| CVE-2026-56341 | Deferred | 未確認 | CWE-862 | AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens, Authorize.Net webhook |
| CVE-2026-56342 | Deferred | 未確認 | CWE-918 | AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the sta |
| CVE-2026-56345 | Deferred | 未確認 | CWE-287 | AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id from the uploaded fil |
| CVE-2026-56346 | Deferred | 未確認 | CWE-306 | AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allows unauthenticated users to decrypt PGP messages. Remot |
| CVE-2026-56347 | Deferred | 未確認 | CWE-79 | AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and tex |
| CVE-2026-56348 | Analyzed | 未確認 | CWE-918 | n8n before 2.20.0 contains a credential exfiltration vulnerability in the POST /rest/dynamic-node-parameters/options endpoint that allows authenticated users to bypass Allowed HTTP |
| CVE-2026-56350 | Analyzed | 未確認 | CWE-285 | n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users to disable SSO enforcement through the API. Attackers can create local password cr |
| CVE-2026-56351 | Analyzed | 未確認 | CWE-89 | n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unesca |
| CVE-2026-56355 | Deferred | 未確認 | CWE-696 | GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization. |
| CVE-2026-56356 | Analyzed | 未確認 | CWE-79 | n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfiguration of the sanitize-html library. Affected releases are t |
| CVE-2026-56357 | Analyzed | 未確認 | CWE-290 | n8n before 1.123.15 and 2.5.0 contains a webhook forgery vulnerability in the GitHub Webhook Trigger node that fails to implement HMAC-SHA256 signature verification. Attackers who |
| CVE-2026-56358 | Analyzed | 未確認 | CWE-79 | n8n before 1.123.25 (1.x) and before 2.11.2 (2.x), with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the Form Trigger node's CSS sanitiz |
| CVE-2026-56361 | Analyzed | 未確認 | CWE-125 | ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing |
| CVE-2026-56363 | Analyzed | 未確認 | CWE-190 | ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attackers to cause denial of service. An attacker can supply a large |
| CVE-2026-56364 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL device profile XML files with unclosed device |
| CVE-2026-56365 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory r |
| CVE-2026-56367 | Analyzed | 未確認 | CWE-125 | ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out |
| CVE-2026-56368 | Analyzed | 未確認 | CWE-401 | ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger |
| CVE-2026-56369 | Analyzed | 未確認 | CWE-323 | ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the |
| CVE-2026-56370 | Analyzed | 未確認 | CWE-125 | ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Attack |
| CVE-2026-56371 | Modified | 未確認 | CWE-401 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is no |
| CVE-2026-56376 | Analyzed | 未確認 | CWE-416 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attack |
| CVE-2026-56377 | Analyzed | 未確認 | CWE-22 | ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path p |
| CVE-2026-56378 | Analyzed | 未確認 | CWE-125 | ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of |
| CVE-2026-56379 | Modified | 未確認 | CWE-116, CWE-78 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers ca |
| CVE-2026-56381 | Deferred | 未確認 | CWE-79 | Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User Permissions page where user group names are rendered without proper HTML escaping. |
| CVE-2026-56382 | Deferred | 未確認 | CWE-94 | Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code execution vulnerability in the FieldsController::actionRenderCardPreview() method, w |
| CVE-2026-56383 | Deferred | 未確認 | CWE-79 | Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig component when using the 'Row Heading' column type. The application fails to sanitize |
| CVE-2026-56384 | Deferred | 未確認 | CWE-862 | Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user without permission to view a target private asset can call the e |
| CVE-2026-56385 | Deferred | 未確認 | CWE-639 | Craft CMS versions >= 5.0.0-RC1, <= 5.9.13 and >= 4.0.0-RC1, <= 4.17.7 contain an authorization bypass in the assets/preview-file endpoint. The action does not enforce per-asset vi |
| CVE-2026-56393 | Deferred | 未確認 | CWE-79 | Craft CMS 4.x (>= 4.0.0-RC1, < 4.17.0-beta.1) and 5.x (>= 5.0.0-RC1, < 5.9.0-beta.1) contain multiple stored cross-site scripting vulnerabilities where settings names and field opt |
| CVE-2026-56394 | Deferred | 未確認 | CWE-22 | Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets/icon endpoint where the extension parameter is not validated before file existence che |
| CVE-2026-56395 | Rejected | 未確認 | Rejected reason: This record is a duplicate; use CVE-2026-56397 instead. | |
| CVE-2026-56396 | Deferred | 未確認 | CWE-862 | phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. |
| CVE-2026-56397 | Deferred | 未確認 | CWE-79 | SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. At |
| CVE-2026-56399 | Deferred | 未確認 | CWE-918 | Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protectio |
| CVE-2026-56402 | Deferred | 未確認 | CWE-862 | NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a val |
| CVE-2026-56403 | Analyzed | 未確認 | CWE-190 | libexpat before 2.8.2 has an integer overflow in storeAtts. |
| CVE-2026-56404 | Analyzed | 未確認 | CWE-190 | libexpat before 2.8.2 has an integer overflow in addBinding. |
| CVE-2026-56405 | Analyzed | 未確認 | CWE-190 | libexpat before 2.8.2 has an integer overflow in getAttributeId. |
| CVE-2026-56406 | Analyzed | 未確認 | CWE-190 | libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse. |
| CVE-2026-56407 | Analyzed | 未確認 | CWE-190 | libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. |
| CVE-2026-56408 | Analyzed | 未確認 | CWE-190 | libexpat before 2.8.2 has an integer overflow in copyString. |
| CVE-2026-56409 | Analyzed | 未確認 | CWE-190 | xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. |
| CVE-2026-56410 | Analyzed | 未確認 | CWE-190 | xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. |
| CVE-2026-56411 | Analyzed | 未確認 | CWE-190 | xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. |
| CVE-2026-56412 | Analyzed | 未確認 | CWE-416 | libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy |
| CVE-2026-56413 | Deferred | 未確認 | CWE-78 | Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network packe |
| CVE-2026-56414 | Deferred | 未確認 | CWE-434 | A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem location |
| CVE-2026-56415 | Deferred | 未確認 | CWE-78 | Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a spec |
| CVE-2026-56422 | Awaiting Analysis | 未確認 | CWE-639 | Multiple MISP core controllers and model capture paths accepted client-controlled request fields such as primary keys (id) and ownership/scope foreign keys (event_id, org_id, user_ |
| CVE-2026-56423 | Analyzed | 未確認 | CWE-862 | MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affected deleteSelection handlers authorized deletion using br |
| CVE-2026-56424 | Analyzed | 未確認 | CWE-639, CWE-862, CWE-863 | MISP core contained multiple broken access-control flaws where authorization checks were performed against the wrong entity, or where ownership/editability checks were missing on w |
| CVE-2026-56425 | Analyzed | 未確認 | CWE-384 | The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important secu |
| CVE-2026-56445 | Deferred | 未確認 | CWE-22 | The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbi |
| CVE-2026-56446 | Analyzed | 未確認 | CWE-94 | MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool. Because log entries can include attacker-controlled conten |
| CVE-2026-56447 | Analyzed | 未確認 | CWE-829 | MISP allowed an authenticated site administrator to set the Kafka_rdkafka_config setting to an arbitrary filesystem path. MISP subsequently parsed the referenced INI file and passe |
| CVE-2026-56448 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability exists in AIL Framework before the release containing commit 0041456af25da0cdea1c1c4624e46baff2731d8f. An authenticated AIL user can supply crafted o |
| CVE-2026-56450 | Deferred | 未確認 | CWE-307 | AIL did not restrict repeated failed attempts to verify a two-factor authentication (OTP) code. An attacker who had reached the 2FA verification step, such as after successfully co |
| CVE-2026-56457 | Analyzed | 未確認 | CWE-532 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to |
| CVE-2026-56663 | Deferred | 未確認 | CWE-918 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated user can bypass the SSR |
| CVE-2026-5667 | Deferred | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Room Air Conditioners (for Japan and outside Japan); Wireless LAN Adapters for Room Air Conditioners (for Japan a |
| CVE-2026-56692 | Deferred | 未確認 | CWE-59 | NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host valida |
| CVE-2026-56693 | Deferred | 未確認 | CWE-602 | NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the create_agent delivery-action handler that performs privileged central-database writes without host-side |
| CVE-2026-56694 | Deferred | 未確認 | CWE-863 | NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges |
| CVE-2026-56695 | Deferred | 未確認 | CWE-862 | OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by |
| CVE-2026-56696 | Deferred | 未確認 | CWE-862 | OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project contex |
| CVE-2026-56697 | Analyzed | 未確認 | CWE-601 | Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 accept protocol-relative paths such as //evil.com in the reloadNuxtApp function; these pass the script-protocol check but res |
| CVE-2026-56698 | Analyzed | 未確認 | CWE-79 | Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 fail to validate script-capable URLs in the navigateTo open option, allowing client-side script execution. Attackers can supp |
| CVE-2026-56700 | Deferred | 未確認 | CWE-502, CWE-78 | Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Scheduler\JobQueue, Framework\Cache\Adapter\FileCache, and Sess |
| CVE-2026-56701 | Deferred | 未確認 | CWE-611 | Grav before 2.0.0-beta.2 contains an XML external entity injection vulnerability in SVG file upload processing that allows authenticated attackers to read arbitrary files. The appl |
| CVE-2026-56761 | Analyzed | 未確認 | CWE-79 | hono before 4.12.14 contains an html injection vulnerability in jsx server-side rendering that allows attackers to inject unintended html by using malformed attribute names. Attack |
| CVE-2026-56762 | Deferred | 未確認 | CWE-20 | Hono before 4.12.12 does not validate cookie names on the write path in the setCookie(), serialize(), and serializeSigned() functions, allowing invalid characters such as control c |
| CVE-2026-56766 | Deferred | 未確認 | CWE-121 | Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules |
| CVE-2026-56767 | Deferred | 未確認 | CWE-862 | Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users |
| CVE-2026-56768 | Deferred | 未確認 | CWE-862 | Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a fo |
| CVE-2026-56769 | Deferred | 未確認 | CWE-918 | Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspac |
| CVE-2026-56770 | Deferred | 未確認 | CWE-129 | libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote at |
| CVE-2026-56771 | Deferred | 未確認 | CWE-918 | NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url endpoint that allows authenticated users to make arbitrary server requests to int |
| CVE-2026-56772 | Deferred | 未確認 | CWE-639 | NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenticated users to read private notification feeds by supplying arbitrary user_id values to th |
| CVE-2026-56773 | Deferred | 未確認 | CWE-862 | Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, cre |
| CVE-2026-56774 | Deferred | 未確認 | CWE-639 | Kanboard through 1.2.52, fixed in commit 928c68a, UserViewController::removeSession fails to validate the session id parameter before passing it to RememberMeSessionModel::remove, |
| CVE-2026-56777 | Analyzed | 未確認 | CWE-184 | n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Python Code node. An authenticated user with permission to create |
| CVE-2026-56779 | Deferred | 未確認 | CWE-918 | MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows authenticated users to make arbitrary server requests by |
| CVE-2026-56780 | Deferred | 未確認 | CWE-639 | Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/password/ endpoint that allows domain administrators to change any |
| CVE-2026-56781 | Deferred | 未確認 | CWE-639 | Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field I |
| CVE-2026-56782 | Deferred | 未確認 | CWE-306 | Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functional |
| CVE-2026-56783 | Deferred | 未確認 | CWE-522 | Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext |
| CVE-2026-56784 | Deferred | 未確認 | CWE-639 | OpenRemote before 1.25.0 contains an insecure direct object reference (IDOR) vulnerability in the bulk alarm deletion endpoint that allows authenticated users to permanently delete |
| CVE-2026-56785 | Deferred | 未確認 | CWE-79 | FlatPress contains a stored cross-site scripting vulnerability in comment and contact forms where name, URL, and email fields are rendered without proper output encoding in Smarty |
| CVE-2026-56786 | Analyzed | 未確認 | CWE-787 | RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-by |
| CVE-2026-56787 | Analyzed | 未確認 | CWE-193 | RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at src/rtcm3.c:1446 that allows remote attackers to trigger a global buffer |
| CVE-2026-56788 | Modified | 未確認 | CWE-125 | RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial |
| CVE-2026-56789 | Analyzed | 未確認 | CWE-122 | RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp |
| CVE-2026-56790 | Deferred | 未確認 | CWE-193 | CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in analyzer/pgn.c that allows remote attackers to crash |
| CVE-2026-56808 | Deferred | 未確認 | CWE-78 | DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user w |
| CVE-2026-56809 | Deferred | 未確認 | CWE-79 | Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be |
| CVE-2026-56815 | Deferred | 未確認 | CWE-61 | pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor. |
| CVE-2026-56823 | Deferred | 未確認 | CWE-284, CWE-639 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to , the `POST /api/integrations/webhooks/{webhook_ |
| CVE-2026-56876 | Analyzed | 未確認 | CWE-22, CWE-61 | extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/pas |
| CVE-2026-56968 | Modified | 未確認 | CWE-839, CWE-908 | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server. |
| CVE-2026-57053 | Analyzed | 未確認 | CWE-1284 | GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not pr |
| CVE-2026-57062 | Awaiting Analysis | 未確認 | CWE-1284 | CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accep |
| CVE-2026-57079 | Deferred | 未確認 | CWE-22 | Net::BitTorrent versions before 2.1.0 for Perl write files outside the download directory via path traversal in peer-supplied metadata. Net::BitTorrent validates file path compone |
| CVE-2026-57080 | Deferred | 未確認 | CWE-400, CWE-770 | Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix. The peer-wire framing in _process_messages trusts t |
| CVE-2026-57081 | Deferred | 未確認 | CWE-400, CWE-674 | Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no |
| CVE-2026-57082 | Deferred | 未確認 | CWE-330, CWE-338 | Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG. The MSE (Message Stream Encryption) handshake derives its |
| CVE-2026-5714 | Deferred | 未確認 | CWE-79 | The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ parameter in all versions up to, and including, 4.1.8 due to insuf |
| CVE-2026-57204 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses this vulnerability can craft a PDF which lea |
| CVE-2026-57231 | Analyzed | 未確認 | CWE-200, CWE-668 | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman |
| CVE-2026-57234 | Analyzed | 未確認 | CWE-178, CWE-184, CWE-611 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on by default for Nokogiri::XML::Sc |
| CVE-2026-57235 | Analyzed | 未確認 | CWE-125, CWE-190 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeSet#[] (and its alias #slice) checked the requested index aga |
| CVE-2026-57236 | Analyzed | 未確認 | CWE-416 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#encoding= with an invalid encoding (e.g., a non-string, or a st |
| CVE-2026-57280 | Analyzed | 未確認 | CWE-693 | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each loops in sandboxed Groovy scripts |
| CVE-2026-57281 | Modified | 未確認 | CWE-693, CWE-917, CWE-93 | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sa |
| CVE-2026-57282 | Analyzed | 未確認 | CWE-78 | Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able |
| CVE-2026-57283 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system c |
| CVE-2026-57284 | Analyzed | 未確認 | CWE-470 | Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to in |
| CVE-2026-57285 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Ent |
| CVE-2026-57286 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information about the SCM repository |
| CVE-2026-57287 | Analyzed | 未確認 | CWE-312 | Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, a |
| CVE-2026-57288 | Analyzed | 未確認 | CWE-90 | Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native (ADSI) authentication path, allowing u |
| CVE-2026-57289 | Analyzed | 未確認 | CWE-295 | Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authentic |
| CVE-2026-57290 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Priority Sorter Plugin 936.v2c01c6b_84449 and earlier allows attackers to overwrite the global job priority configurati |
| CVE-2026-57291 | Deferred | 未確認 | CWE-862 | Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attac |
| CVE-2026-57292 | Deferred | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers to connect to an attacker-specified URL using attacker- |
| CVE-2026-57293 | Deferred | 未確認 | CWE-862 | An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permiss |
| CVE-2026-57294 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL us |
| CVE-2026-57295 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers to connect to an attacker-specified URL using at |
| CVE-2026-57296 | Deferred | 未確認 | CWE-22 | Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowi |
| CVE-2026-57297 | Modified | 未確認 | CWE-862 | A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-speci |
| CVE-2026-57298 | Deferred | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacke |
| CVE-2026-57299 | Modified | 未確認 | CWE-862 | Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configu |
| CVE-2026-57300 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they |
| CVE-2026-57301 | Analyzed | 未確認 | CWE-610 | Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to |
| CVE-2026-57302 | Analyzed | 未確認 | CWE-256 | Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permis |
| CVE-2026-57303 | Analyzed | 未確認 | CWE-918 | Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the conf |
| CVE-2026-57304 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specif |
| CVE-2026-57305 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified us |
| CVE-2026-57306 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers to connect to an attacker-specified URL using |
| CVE-2026-57307 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL |
| CVE-2026-57312 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. |
| CVE-2026-57313 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions. |
| CVE-2026-57314 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions. |
| CVE-2026-57315 | Deferred | 未確認 | CWE-94 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions. |
| CVE-2026-57316 | Deferred | 未確認 | CWE-497 | Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions. |
| CVE-2026-57317 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions. |
| CVE-2026-57318 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. |
| CVE-2026-57319 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions. |
| CVE-2026-57320 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions. |
| CVE-2026-57321 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions. |
| CVE-2026-57322 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows Reflected XSS.This issue affects weMail: from n/a |
| CVE-2026-57323 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions. |
| CVE-2026-57324 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions. |
| CVE-2026-57325 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions. |
| CVE-2026-57326 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. |
| CVE-2026-57327 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in MainWP <= 6.1.1 versions. |
| CVE-2026-57328 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. |
| CVE-2026-57329 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions. |
| CVE-2026-57330 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions. |
| CVE-2026-57331 | Deferred | 未確認 | CWE-22 | Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions. |
| CVE-2026-57332 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions. |
| CVE-2026-57333 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions. |
| CVE-2026-57334 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions. |
| CVE-2026-57335 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions. |
| CVE-2026-57336 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions. |
| CVE-2026-57337 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. |
| CVE-2026-57338 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. |
| CVE-2026-57339 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions. |
| CVE-2026-57340 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions. |
| CVE-2026-57341 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 versions. |
| CVE-2026-57346 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This issue affects Embed Privacy: from |
| CVE-2026-57429 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Slim SEO <= 4.6.2 versions. |
| CVE-2026-57430 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions. |
| CVE-2026-57431 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions. |
| CVE-2026-57434 | Analyzed | 未確認 | CWE-476 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitiali |
| CVE-2026-57435 | Analyzed | 未確認 | CWE-416, CWE-825 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to freed m |
| CVE-2026-57436 | Analyzed | 未確認 | CWE-416 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Document#root= validated only that the new root was a Nokogiri::X |
| CVE-2026-57437 | Analyzed | 未確認 | CWE-416 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source document alive for garbage c |
| CVE-2026-57438 | Analyzed | 未確認 | CWE-416 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by Nokogiri::XML::Node#do_xinclude replaced each |
| CVE-2026-57451 | Analyzed | 未確認 | CWE-125 | Vim is an open source, command line text editor. Prior to 9.2.0670, get_text_props() in src/textprop.c reads a uint16 property count stored inline after a line's text and returns i |
| CVE-2026-57452 | Analyzed | 未確認 | CWE-125, CWE-191 | Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04! or VimCrypt~05! method (xchacha20poly1305, requires the +s |
| CVE-2026-57453 | Analyzed | 未確認 | CWE-77 | Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, updat |
| CVE-2026-57454 | Analyzed | 未確認 | CWE-125 | Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside t |
| CVE-2026-57455 | Analyzed | 未確認 | CWE-787 | Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (s |
| CVE-2026-57456 | Analyzed | 未確認 | CWE-94 | Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes r |
| CVE-2026-57473 | Awaiting Analysis | 未確認 | CWE-1391 | A vulnerability exists in the netclient and factory services of Reolink Home Hub (versions prior to v3.3.0.456_26031911) due to the possibility of brute-force cracking the credenti |
| CVE-2026-57498 | Deferred | 未確認 | CWE-639, CWE-862 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Coolify's API controllers consistently validate server |
| CVE-2026-57518 | Deferred | 未確認 | CWE-862 | Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitr |
| CVE-2026-57520 | Analyzed | 未確認 | CWE-862 | Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authenticated Custom users with ManageUsers permission to remove Admin accounts from an o |
| CVE-2026-57521 | Analyzed | 未確認 | CWE-862 | Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any authenticated user to access arbitrary organization billing data by supplying an arb |
| CVE-2026-57522 | Analyzed | 未確認 | CWE-74 | Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), which substitutes user-controlled values into event-integr |
| CVE-2026-57523 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57525 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57527 | Awaiting Analysis | 未確認 | CWE-502 | Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitr |
| CVE-2026-57532 | Deferred | 未確認 | CWE-80 | Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the browser. This could allow one backe |
| CVE-2026-57533 | Deferred | 未確認 | CWE-80 | Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs. Since this page has a Content-Security-Policy, this can mainly b |
| CVE-2026-57534 | Deferred | 未確認 | CWE-80 | Malicious HTML content could be injected into the content of a page in the pretix-pages plugin. |
| CVE-2026-57535 | Deferred | 未確認 | CWE-80 | Content injected to PDF rendering contexts could, in many places, include HTML content including <img> tags. If the src attribute of these images pointed to an URL, the PDF render |
| CVE-2026-57536 | Deferred | 未確認 | CWE-841 | Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it |
| CVE-2026-5757 | Analyzed | 未確認 | CWE-125 | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially le |
| CVE-2026-57585 | Analyzed | 未確認 | CWE-416 | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leadin |
| CVE-2026-57587 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results |
| CVE-2026-57588 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan resul |
| CVE-2026-57589 | Analyzed | 未確認 | CWE-416 | sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget(). |
| CVE-2026-57617 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions. |
| CVE-2026-57618 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions. |
| CVE-2026-57619 | Deferred | 未確認 | CWE-862 | Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. |
| CVE-2026-57620 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS. This issue affects |
| CVE-2026-57622 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WPCafe <= 3.0.14 versions. |
| CVE-2026-57627 | Deferred | 未確認 | CWE-918 | Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions. |
| CVE-2026-57628 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in WP All Import <= 4.0.1 versions. |
| CVE-2026-57629 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in StatCounter <= 2.1.1 versions. |
| CVE-2026-57630 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions. |
| CVE-2026-57631 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Popup box <= 6.0.1 versions. |
| CVE-2026-57632 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions. |
| CVE-2026-57633 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versions. |
| CVE-2026-57634 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions. |
| CVE-2026-57635 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions. |
| CVE-2026-57636 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in wpForo Forum <= 3.0.9 versions. |
| CVE-2026-57637 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. |
| CVE-2026-57638 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions. |
| CVE-2026-57640 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions. |
| CVE-2026-57641 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions. |
| CVE-2026-57642 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Gallery <= 4.7.8 versions. |
| CVE-2026-57643 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in WP Post Author <= 3.9.1 versions. |
| CVE-2026-57644 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions. |
| CVE-2026-57645 | Deferred | 未確認 | CWE-862 | newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions. |
| CVE-2026-57646 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Majestic Support <= 1.1.7 versions. |
| CVE-2026-57647 | Deferred | 未確認 | CWE-98 | Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions. |
| CVE-2026-57648 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Nelio Content <= 4.3.4 versions. |
| CVE-2026-57649 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions. |
| CVE-2026-57650 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions. |
| CVE-2026-57651 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions. |
| CVE-2026-57652 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions. |
| CVE-2026-57653 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. |
| CVE-2026-57654 | Deferred | 未確認 | CWE-862 | Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. |
| CVE-2026-57655 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions. |
| CVE-2026-57656 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions. |
| CVE-2026-57657 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions. |
| CVE-2026-57658 | Deferred | 未確認 | CWE-434 | Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions. |
| CVE-2026-57659 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions. |
| CVE-2026-57660 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions. |
| CVE-2026-57661 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions. |
| CVE-2026-57662 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. |
| CVE-2026-57663 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions. |
| CVE-2026-57664 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions. |
| CVE-2026-57665 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions. |
| CVE-2026-57667 | Deferred | 未確認 | CWE-89 | Sales Representative SQL Injection in Groundhogg <= 4.5 versions. |
| CVE-2026-57676 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User Avatar allows Exploiting Incorrectly Configured Access Control Security Levels. This iss |
| CVE-2026-57700 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue affects OMGF Pro: from n/a through 5.2.6. |
| CVE-2026-57872 | Deferred | 未確認 | CWE-22 | An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient v |
| CVE-2026-57873 | Deferred | 未確認 | CWE-476 | An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by im |
| CVE-2026-57874 | Deferred | 未確認 | CWE-120 | An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficien |
| CVE-2026-57875 | Deferred | 未確認 | CWE-476 | An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earli |
| CVE-2026-57876 | Deferred | 未確認 | CWE-787 | An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bound |
| CVE-2026-57877 | Deferred | 未確認 | CWE-134 | An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externa |
| CVE-2026-57878 | Deferred | 未確認 | CWE-121 | An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient |
| CVE-2026-57879 | Deferred | 未確認 | CWE-121 | An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bo |
| CVE-2026-57880 | Deferred | 未確認 | CWE-121 | An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bo |
| CVE-2026-57881 | Deferred | 未確認 | CWE-121 | An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient l |
| CVE-2026-57912 | Deferred | 未確認 | CWE-602 | Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers. |
| CVE-2026-57913 | Deferred | 未確認 | CWE-602 | Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts. |
| CVE-2026-57914 | Deferred | 未確認 | CWE-400 | By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users |
| CVE-2026-57915 | Deferred | 未確認 | CWE-304, CWE-358 | It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to ve |
| CVE-2026-57918 | Awaiting Analysis | 未確認 | CWE-191 | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expecte |
| CVE-2026-57919 | Deferred | 未確認 | CWE-276, CWE-426 | PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENERIC_READ and GENERIC_WRITE permissions to |
| CVE-2026-5792 | Deferred | 未確認 | CWE-290 | Authentication bypass by spoofing vulnerability in Hedef Media Promotion Interactive Media Marketing Inc. Related Marketing Cloud (RMC) allows Brute Force. This issue affects Rela |
| CVE-2026-57920 | Analyzed | 未確認 | CWE-551 | Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints. |
| CVE-2026-57921 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint |
| CVE-2026-57922 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible |
| CVE-2026-57923 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings |
| CVE-2026-57924 | Analyzed | 未確認 | CWE-276 | In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details |
| CVE-2026-57925 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags |
| CVE-2026-57926 | Analyzed | 未確認 | CWE-1321 | In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack |
| CVE-2026-57940 | Deferred | 未確認 | CWE-918 | HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality. The function get_feed() in system/admin/admin.php passes user-supplied |
| CVE-2026-57942 | Deferred | 未確認 | CWE-348 | LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof cli |
| CVE-2026-57943 | Deferred | 未確認 | CWE-639 | LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to ot |
| CVE-2026-57945 | Deferred | 未確認 | CWE-639 | PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending re |
| CVE-2026-57946 | Deferred | 未確認 | CWE-862 | Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve private playlist contents by accessing the RS |
| CVE-2026-57947 | Deferred | 未確認 | CWE-918 | Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that allows authenticated users to register internal URLs due to mi |
| CVE-2026-57948 | Deferred | 未確認 | CWE-1004, CWE-614 | Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and Secu |
| CVE-2026-57949 | Deferred | 未確認 | CWE-862 | ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET /admin-api/crm/follow-up-record/get endpoint that all |
| CVE-2026-57950 | Deferred | 未確認 | CWE-863 | ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that allows attackers with erp:sale-out permissions |
| CVE-2026-57951 | Modified | 未確認 | CWE-863 | Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfied _or condition that bypasses operation-scoped access contr |
| CVE-2026-57952 | Analyzed | 未確認 | CWE-862 | Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_webhook, c2profile_redirect_rules_webhook, c2profile_get_ioc_we |
| CVE-2026-57953 | Analyzed | 未確認 | CWE-863 | Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to perform unauthorized write operations by accessing the event |
| CVE-2026-57954 | Deferred | 未確認 | CWE-862 | Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules, allowing attackers to sort collections by forbidden f |
| CVE-2026-57955 | Deferred | 未確認 | CWE-89 | SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the r |
| CVE-2026-57956 | Deferred | 未確認 | CWE-639 | SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as |
| CVE-2026-57957 | Deferred | 未確認 | CWE-942 | Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration vulnerability that allows unauthenticated remote attackers to perform credentialed cross-o |
| CVE-2026-57958 | Deferred | 未確認 | CWE-79 | Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in authenticated users' browsers |
| CVE-2026-57959 | Deferred | 未確認 | CWE-367 | Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before asynchronous UpdateEventStatisticsJob increments it, allowing |
| CVE-2026-5796 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have |
| CVE-2026-57960 | Deferred | 未確認 | CWE-359 | Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and per |
| CVE-2026-57965 | Analyzed | 未確認 | CWE-190 | A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a he |
| CVE-2026-57966 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating sy |
| CVE-2026-57995 | Deferred | 未確認 | CWE-269 | phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController::updatePermissions that allows GROUP_EDIT administrators to grant arbitrary rights to groups |
| CVE-2026-57997 | Analyzed | 未確認 | CWE-327 | Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, allowing acceptance of HS384 and HS512 t |
| CVE-2026-57999 | Deferred | 未確認 | CWE-78 | luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows authenticated users to execute arbitrary commands as root. |
| CVE-2026-58000 | Deferred | 未確認 | CWE-78 | luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated in |
| CVE-2026-58010 | Modified | 未確認 | CWE-126 | A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the |
| CVE-2026-58011 | Modified | 未確認 | CWE-125 | A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced |
| CVE-2026-58012 | Modified | 未確認 | CWE-126 | A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the |
| CVE-2026-58013 | Modified | 未確認 | CWE-126 | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is |
| CVE-2026-58014 | Modified | 未確認 | CWE-193 | A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This f |
| CVE-2026-58015 | Modified | 未確認 | CWE-22 | A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from th |
| CVE-2026-58016 | Modified | 未確認 | CWE-191 | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, s |
| CVE-2026-58049 | Awaiting Analysis | 未確認 | CWE-787 | FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA reg |
| CVE-2026-58050 | Analyzed | 未確認 | CWE-190 | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_at |
| CVE-2026-58051 | Analyzed | 未確認 | CWE-908 | libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup pa |
| CVE-2026-58052 | Analyzed | 未確認 | CWE-693 | 7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier |
| CVE-2026-58053 | Deferred | 未確認 | CWE-269 | Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privi |
| CVE-2026-58054 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This CVE was assigned on the basis that the permission system allows a limited administr | |
| CVE-2026-58055 | Analyzed | 未確認 | CWE-444 | nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-addi |
| CVE-2026-58056 | Deferred | 未確認 | CWE-863 | RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A |
| CVE-2026-58057 | Analyzed | 未確認 | CWE-178 | Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where environment names are case-insensit |
| CVE-2026-58058 | Analyzed | 未確認 | CWE-191 | Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffe |
| CVE-2026-58116 | Analyzed | 未確認 | CWE-829, CWE-94 | LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model p |
| CVE-2026-58138 | Deferred | 未確認 | CWE-94 | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting in |
| CVE-2026-58165 | Deferred | 未確認 | CWE-862 | OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment managemen |
| CVE-2026-58166 | Deferred | 未確認 | CWE-22 | OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by s |
| CVE-2026-58167 | Deferred | 未確認 | CWE-862 | Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP bearer tokens, HTTP basic-auth passwords, and mTLS client |
| CVE-2026-58168 | Deferred | 未確認 | CWE-862 | DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools functio |
| CVE-2026-58169 | Deferred | 未確認 | CWE-346 | Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypass bearer-token authentication by exploiting the server' |
| CVE-2026-58170 | Deferred | 未確認 | CWE-22 | Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization (agent/src/live/m |
| CVE-2026-58171 | Deferred | 未確認 | CWE-22 | Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in run_dir (agent/src/swar |
| CVE-2026-58172 | Deferred | 未確認 | CWE-288 | Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restrictions by sending We |
| CVE-2026-58173 | Deferred | 未確認 | CWE-22 | Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying a malicious memory_t |
| CVE-2026-58174 | Deferred | 未確認 | CWE-732 | Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api |
| CVE-2026-58176 | Deferred | 未確認 | CWE-862 | RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task management endpoints under /workflow/task (FlwTaskController) without any permission check: the control |
| CVE-2026-5818 | Awaiting Analysis | 未確認 | CWE-253 | Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW du |
| CVE-2026-58302 | Deferred | 未確認 | CWE-22 | rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen() by using a user-supplied |
| CVE-2026-58369 | Deferred | 未確認 | CWE-476 | Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally dereferences the sessio |
| CVE-2026-58370 | Deferred | 未確認 | CWE-290 | Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. For the GitLab forge driver, pipeline.Author is populated from the git commit author |
| CVE-2026-58371 | Deferred | 未確認 | CWE-79 | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/javascript in the shared writeJson helper (weed/server/comm |
| CVE-2026-58372 | Deferred | 未確認 | CWE-22 | SeaweedFS before 4.34 contains a path traversal vulnerability in the S3 gateway DeleteMultipleObjectsHandler that allows authenticated S3 principals with write access to a single b |
| CVE-2026-58373 | Analyzed | 未確認 | CWE-862 | CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.get_queryset that allows authenticated attackers to enumerate quality report identifiers |
| CVE-2026-58374 | Analyzed | 未確認 | CWE-193 | In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing allows an unauthenticated attacker withi |
| CVE-2026-58375 | Deferred | 未確認 | CWE-306 | JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so JimuReportTokenInterceptor skips |
| CVE-2026-58376 | Deferred | 未確認 | CWE-89 | Dolibarr through 23.0.3, fixed in commit 14db36e, contains a sql injection vulnerability that allows authenticated API users to exfiltrate arbitrary database contents by supplying |
| CVE-2026-58377 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.2 contains a broken access control vulnerability that allows authenticated low-privilege users to perform full create, read, update, and delete operations on |
| CVE-2026-58446 | Deferred | 未確認 | CWE-306 | Presenton before 0.8.8-beta bundles an MCP server that, on server/Docker deployments configured with session authentication (AUTH_USERNAME/AUTH_PASSWORD), is reachable unauthentica |
| CVE-2026-58447 | Deferred | 未確認 | CWE-639 | Invidious through 2.20260626.0, fixed in commit 77ad416, contains a broken object level authorization vulnerability that allows authenticated attackers to delete videos from other |
| CVE-2026-58448 | Deferred | 未確認 | CWE-862 | yudao-cloud before 2026.06 contains a broken access control vulnerability in the BPM module that allows any authenticated user to access arbitrary process instance records by suppl |
| CVE-2026-58449 | Deferred | 未確認 | CWE-94 | txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and |
| CVE-2026-58450 | Deferred | 未確認 | CWE-601 | Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthenticated attackers to redirect authenticated victims to attacker |
| CVE-2026-5952 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have |
| CVE-2026-6039 | Deferred | 未確認 | CWE-197, CWE-787 | LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was trunca |
| CVE-2026-6040 | Deferred | 未確認 | CWE-416, CWE-787, CWE-825 | A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the f |
| CVE-2026-6045 | Deferred | 未確認 | CWE-190, CWE-787 | LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points |
| CVE-2026-6046 | Analyzed | 未確認 | CWE-200 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to validate that a username returned during bot registration belongs to a bot |
| CVE-2026-6047 | Deferred | 未確認 | CWE-787, CWE-843 | LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assum |
| CVE-2026-6062 | Analyzed | 未確認 | CWE-639 | Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 Fail to validate channel ownership of an existing subscription before applying edits w |
| CVE-2026-6090 | Awaiting Analysis | 未確認 | CWE-290 | A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges. |
| CVE-2026-6091 | Analyzed | 未確認 | CWE-295 | Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An attacker could prese |
| CVE-2026-6092 | Analyzed | 未確認 | CWE-757 | When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC. |
| CVE-2026-6094 | Analyzed | 未確認 | CWE-125 | Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME |
| CVE-2026-6207 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6208 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6209 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6211 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This is |
| CVE-2026-6239 | Deferred | 未確認 | CWE-121 | A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes duri |
| CVE-2026-6240 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion para |
| CVE-2026-6241 | Deferred | 未確認 | CWE-134 | An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without a |
| CVE-2026-6242 | Deferred | 未確認 | CWE-134 | An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper handling of externally supplied parameters within formatting fu |
| CVE-2026-6250 | Analyzed | 未確認 | CWE-134 | An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to improper handling of user-controlled input. Externally controlled data is interpret |
| CVE-2026-6269 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could ha |
| CVE-2026-6274 | Deferred | 未確認 | CWE-1390, CWE-287, CWE-306 | Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Access |
| CVE-2026-6277 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have a |
| CVE-2026-6291 | Analyzed | 未確認 | CWE-208 | Bleichenbacher padding oracle in PKCS#7 KTRI decryption. When decrypting PKCS#7 EnvelopedData using RSA PKCS#1 v1.5 key transport, wolfSSL returned distinguishable error codes depe |
| CVE-2026-6292 | Deferred | 未確認 | CWE-352 | The MP Customize Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.0. This is due to a completely broken nonc |
| CVE-2026-6325 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer. |
| CVE-2026-6329 | Analyzed | 未確認 | CWE-347 | PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS#12 verify pa |
| CVE-2026-6330 | Analyzed | 未確認 | CWE-327 | The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that co |
| CVE-2026-6331 | Analyzed | 未確認 | CWE-347 | HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HMAC verification. In the OpenSSL-compatibility HMAC verify path th |
| CVE-2026-6338 | Awaiting Analysis | 未確認 | CWE-444 | A HTTP request smuggling and desynchronization vulnerability affects Kong Gateway Enterprise 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 series. The vulnerability is caused by a parsing |
| CVE-2026-6412 | Analyzed | 未確認 | CWE-327 | Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate processing. |
| CVE-2026-6428 | Awaiting Analysis | 未確認 | CWE-89 | SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.0 |
| CVE-2026-6432 | Awaiting Analysis | 未確認 | CWE-130 | Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dynamic memory |
| CVE-2026-6444 | Awaiting Analysis | 未確認 | CWE-639 | A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned pr |
| CVE-2026-6445 | Awaiting Analysis | 未確認 | CWE-939 | A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges. |
| CVE-2026-6448 | Deferred | 未確認 | CWE-89 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' parameter in all versions up to, |
| CVE-2026-6450 | Analyzed | 未確認 | CWE-295 | A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be |
| CVE-2026-6458 | Awaiting Analysis | 未確認 | CWE-325 | Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results in an incorrect GCM authentication tag. When the streaming AES-256-GCM API is used with emp |
| CVE-2026-6517 | Analyzed | 未確認 | CWE-522 | Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any |
| CVE-2026-6552 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. GitLab determined that the reported behavior does not constitute a vulnerability: linking a group SAML identity requires the user to | |
| CVE-2026-6556 | Analyzed | 未確認 | CWE-285 | @fastify/express versions 4.0.6 and earlier only rewrite the plugin prefix for middleware mount paths when the path argument is a string. Non-string mount paths (arrays of paths an |
| CVE-2026-6645 | Deferred | 未確認 | CWE-427 | An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operate |
| CVE-2026-6653 | Analyzed | 未確認 | CWE-416, CWE-611 | Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML inp |
| CVE-2026-6657 | Analyzed | 未確認 | CWE-346 | A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue ar |
| CVE-2026-6658 | Deferred | 未確認 | CWE-79 | A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows for Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports. The `data_mermaid` block in |
| CVE-2026-6673 | Analyzed | 未確認 | CWE-306 | Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to authenticate Atlassian Connect installed callbacks, allowing a remote unauthen |
| CVE-2026-6676 | Deferred | 未確認 | CWE-787 | Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the an |
| CVE-2026-6678 | Modified | 未確認 | CWE-191 | Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handling during decryption. |
| CVE-2026-6679 | Analyzed | 未確認 | CWE-190, CWE-197, CWE-787 | A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when com |
| CVE-2026-6681 | Analyzed | 未確認 | CWE-120, CWE-787 | The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSS |
| CVE-2026-6689 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains |
| CVE-2026-6716 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6731 | Analyzed | 未確認 | CWE-295 | X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be acce |
| CVE-2026-6733 | Analyzed | 未確認 | CWE-367 | Impact: Undici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 r |
| CVE-2026-6734 | Modified | 未確認 | CWE-346, CWE-940 | Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requ |
| CVE-2026-6739 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-level permission when patching protected default system role |
| CVE-2026-6798 | Deferred | 未確認 | CWE-862 | The 2Download Connector for 2DL Hosted Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 0.1.5. This is due to the plugin not |
| CVE-2026-6853 | Deferred | 未確認 | CWE-307 | Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication B |
| CVE-2026-6858 | Deferred | 未確認 | CWE-79 | The Transbank Webpay WordPress plugin before 1.14.0 does not sanitize and escape logs to be displayed, allowing unauthenticated users to perform Stored XSS attacks against logged i |
| CVE-2026-6873 | Analyzed | 未確認 | CWE-347 | An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.http.HttpRequest.get_signed_cookie` in Django uses a non-injective salt derivation (concatenating |
| CVE-2026-6893 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) optio |
| CVE-2026-6899 | Deferred | 未確認 | CWE-299 | Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It m |
| CVE-2026-6933 | Deferred | 未確認 | CWE-434 | The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePlugi |
| CVE-2026-6953 | Deferred | 未確認 | CWE-79 | HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing malicious HTML code to a victim via the contac |
| CVE-2026-6954 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to execute JavaScript code or inject a dynamic iframe into the |
| CVE-2026-6961 | Analyzed | 未確認 | CWE-22 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during sha |
| CVE-2026-6964 | Deferred | 未確認 | CWE-862 | The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.6.7. This is due to the plugin not properly veri |
| CVE-2026-6976 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could hav |
| CVE-2026-7047 | Deferred | 未確認 | CWE-352 | The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce vali |
| CVE-2026-7165 | Deferred | 未確認 | CWE-20 | The vulnerability is present in the ‘/addJugador’ endpoint: * The 'keyJugador' and 'keyJugadorObjectiu' parameters allow the modification of other users’ information without re |
| CVE-2026-7166 | Deferred | 未確認 | CWE-200 | Vulnerability involving the exposure of sensitive data provided without adequate protection. The API exposes email and phone number data from the ‘email’ and ‘telefon’ fields. This |
| CVE-2026-7167 | Deferred | 未確認 | CWE-200 | The vulnerability arises when the system fails to properly validate the 'email' field during the authentication process, allowing unverified or fake email addresses to be accepted. |
| CVE-2026-7184 | Analyzed | 未確認 | CWE-201 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users w |
| CVE-2026-7186 | Analyzed | 未確認 | CWE-79 | Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store |
| CVE-2026-7195 | Analyzed | 未確認 | CWE-20 | CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x be |
| CVE-2026-7198 | Analyzed | 未確認 | CWE-284 | CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restric |
| CVE-2026-7201 | Analyzed | 未確認 | CWE-639 | CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allow |
| CVE-2026-7250 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could ha |
| CVE-2026-7253 | Modified | 未確認 | CWE-89 | IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the atta |
| CVE-2026-7273 | Analyzed | 掲載 | CWE-121 | A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to |
| CVE-2026-7299 | Analyzed | 未確認 | CWE-79 | Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Developer to inject p |
| CVE-2026-7300 | Modified | 未確認 | CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Over |
| CVE-2026-7312 | Analyzed | 未確認 | CWE-522 | CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15 |
| CVE-2026-7313 | Analyzed | 未確認 | CWE-522 | CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text |
| CVE-2026-7368 | Deferred | 未確認 | CWE-862 | The Yarbo cloud does not enforce per-device or per-user authorization. Any client possessing valid credentials, whether the shared hard-coded credentials or legitimate per-user cre |
| CVE-2026-7383 | Analyzed | 未確認 | CWE-787 | Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap |
| CVE-2026-7387 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management authorization when setting the scheme_a |
| CVE-2026-7421 | Deferred | 未確認 | CWE-79 | The Passeum Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.0. This is due to the `get_shop_url()` method return |
| CVE-2026-7473 | Analyzed | 掲載 | CWE-1023 | On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) t |
| CVE-2026-7486 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software Inc. E-İmar allows SQL Injection. This issue affects E-İmar: |
| CVE-2026-7511 | Analyzed | 未確認 | CWE-347 | PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to be accepted. |
| CVE-2026-7515 | Deferred | 未確認 | CWE-98 | The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the `doc_style` parameter. This makes it possible for unau |
| CVE-2026-7516 | Awaiting Analysis | 未確認 | CWE-749 | A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in brows |
| CVE-2026-7523 | Deferred | 未確認 | CWE-862 | The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user |
| CVE-2026-7531 | Analyzed | 未確認 | CWE-416 | Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 (released in 5.9.1): a malicious TLS 1.3 server sending a truncated PQC hybrid |
| CVE-2026-7532 | Modified | 未確認 | CWE-295 | iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an i |
| CVE-2026-7537 | Deferred | 未確認 | CWE-434 | The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is d |
| CVE-2026-7539 | Awaiting Analysis | 未確認 | CWE-379 | A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arb |
| CVE-2026-7542 | Deferred | 未確認 | CWE-200 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions 7.0 to 7.0.10. This is due to three compounding design flaws: (1) the plugi |
| CVE-2026-7547 | Deferred | 未確認 | CWE-22 | The Woosa – Marktplaats for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in versions up to and including 2.0.4. This is due to insuffici |
| CVE-2026-7556 | Deferred | 未確認 | CWE-79 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment text in all versions up to, and including, 7.5.49.7212 due to insuf |
| CVE-2026-7565 | Deferred | 未確認 | CWE-22 | The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Traversal in all versions up to, and including, 4.1.4 via the 'impo |
| CVE-2026-7566 | Deferred | 未確認 | CWE-502 | The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.4 via deserialization of untrusted inp |
| CVE-2026-7569 | Analyzed | 未確認 | CWE-79 | Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installat |
| CVE-2026-7570 | Analyzed | 未確認 | CWE-89 | Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation |
| CVE-2026-7574 | Awaiting Analysis | 未確認 | CWE-353 | Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only file presence and a v |
| CVE-2026-7617 | Deferred | 未確認 | CWE-862 | The Secufor_OAuth plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.7. This is due to the plugin not properly verifying that a use |
| CVE-2026-7624 | Deferred | 未確認 | CWE-862 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.4.16. This is due to the plugin not properly veri |
| CVE-2026-7654 | Deferred | 未確認 | CWE-502 | The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `uns |
| CVE-2026-7656 | Modified | 未確認 | CWE-290, CWE-670 | The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4861 |
| CVE-2026-7662 | Deferred | 未確認 | CWE-79 | The ePaperFlip Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'publicationid' attribute of the `epaperflip_embed` shortcode in all versions up |
| CVE-2026-7663 | Analyzed | 未確認 | CWE-285, CWE-863 | IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforc |
| CVE-2026-7664 | Analyzed | 未確認 | CWE-287 | IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforc |
| CVE-2026-7665 | Deferred | 未確認 | CWE-639 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 vi |
| CVE-2026-7666 | Analyzed | 未確認 | CWE-319 | An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend` in Django fails to prevent reuse of a partially-initialized |
| CVE-2026-7761 | Deferred | 未確認 | CWE-862 | The Ultimate Member plugin for WordPress is vulnerable to Account Takeover via Password Reset Link Disclosure in all versions up to and including 2.11.4. This is due to a chain of |
| CVE-2026-7762 | Awaiting Analysis | 未確認 | A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attac | |
| CVE-2026-7763 | Awaiting Analysis | 未確認 | A heap-based buffer overflow vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacke | |
| CVE-2026-7764 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.12 allows an unauthenticated attacker withi |
| CVE-2026-7765 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the v |
| CVE-2026-7770 | Analyzed | 未確認 | CWE-74 | IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator. |
| CVE-2026-7774 | Awaiting Analysis | 未確認 | CWE-22 | tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extr |
| CVE-2026-7787 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references. |
| CVE-2026-7792 | Deferred | 未確認 | CWE-345 | The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity i |
| CVE-2026-7795 | Deferred | 未確認 | CWE-79 | The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode 'num' parameter in all versions up to, and including, 4.38. |
| CVE-2026-7796 | Deferred | 未確認 | CWE-79 | The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block 'u |
| CVE-2026-7803 | Analyzed | 未確認 | CWE-20 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields. |
| CVE-2026-7842 | Deferred | 未確認 | The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameters in the import_list(), url_detail(), | |
| CVE-2026-7850 | Deferred | 未確認 | The WP Magnific Popup WordPress plugin through 1.0 does not properly escape user-controlled link URLs before injecting them into the DOM when displaying image load error messages, | |
| CVE-2026-7852 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. LimRAD NAC allows Remote Code Inclusion. This issue affects LimRAD NAC: before 5.5.7.3.9. |
| CVE-2026-7858 | Awaiting Analysis | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magi |
| CVE-2026-7859 | Deferred | 未確認 | CWE-862 | The Motors WordPress plugin before 1.4.110 does not have proper authorisation and CSRF checks on one of its AJAX actions, allowing unauthenticated attackers to modify arbitrary po |
| CVE-2026-7870 | Analyzed | 未確認 | CWE-427 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with admin |
| CVE-2026-7871 | Analyzed | 未確認 | CWE-502 | IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrit |
| CVE-2026-7873 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compr |
| CVE-2026-7874 | Analyzed | 未確認 | CWE-338 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at r |
| CVE-2026-7888 | Deferred | 未確認 | CWE-502 | Concrete CMS below 9.5.3 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_classes restrictio |
| CVE-2026-8023 | Modified | 未確認 | CWE-22, CWE-23 | Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files |
| CVE-2026-8024 | Deferred | 未確認 | CWE-502 | A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems. |
| CVE-2026-8025 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQL Injection. This is |
| CVE-2026-8035 | Analyzed | 未確認 | CWE-476 | Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. Thi |
| CVE-2026-8036 | Analyzed | 未確認 | CWE-1285 | Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects |
| CVE-2026-8037 | Analyzed | 掲載 | CWE-77 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster applian |
| CVE-2026-8039 | Deferred | 未確認 | CWE-79 | The Fancy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' shortcode attribute in the 'testimonial' shortcode in all versions up to, |
| CVE-2026-8045 | Analyzed | 未確認 | CWE-611 | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data |
| CVE-2026-8049 | Deferred | 未確認 | In SignalRGB versions prior to 1.3.7.0, the \\.\SignalIo device object is created without an explicit SDDL security descriptor and without FILE_DEVICE_SECURE_OPEN. This results in | |
| CVE-2026-8050 | Deferred | 未確認 | In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first verifying that it is non-NULL. Sending an IOCTL with | |
| CVE-2026-8059 | Analyzed | 未確認 | CWE-79 | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker t |
| CVE-2026-8071 | Deferred | 未確認 | CWE-79 | The Anti-Spam by CleanTalk. Spam protection WordPress plugin before 6.79 does not properly sanitize content within a custom shortcode used in its email-encoding feature, allowing u |
| CVE-2026-8074 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a User Manager with user m |
| CVE-2026-8078 | Analyzed | 未確認 | CWE-79 | Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settin |
| CVE-2026-8089 | Deferred | 未確認 | CWE-79 | The weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce WordPress plugin before 2.1.3 does not properly escape a user-supplied parame |
| CVE-2026-8095 | Deferred | 未確認 | CWE-73 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due to a case-sensitive b |
| CVE-2026-8100 | Deferred | 未確認 | CWE-23 | Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper ha |
| CVE-2026-8118 | Deferred | 未確認 | CWE-73 | The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Arbitrary File Read in versions 1.7.1058 through 1.7.1059. This is due |
| CVE-2026-8141 | Deferred | 未確認 | CWE-79 | The Ajax Load More - Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'taxonomy_include_children' parameter in all versions up to, and including, 3 |
| CVE-2026-8157 | Deferred | 未確認 | CWE-269 | The Vitepos WordPress plugin before 3.4.2 does not properly restrict the roles that can be assigned when creating new users via one of its REST API endpoints, allowing authenticat |
| CVE-2026-8163 | Deferred | 未確認 | The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a SQL Injection vulnerabil | |
| CVE-2026-8172 | Deferred | 未確認 | The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form output on validation errors, leading | |
| CVE-2026-8176 | Deferred | 未確認 | CWE-269 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 5. |
| CVE-2026-8206 | Deferred | 未確認 | CWE-269 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This |
| CVE-2026-8293 | Deferred | 未確認 | CWE-287 | The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST endpoints, allowing an attack |
| CVE-2026-8296 | Deferred | 未確認 | CWE-79 | In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts. |
| CVE-2026-8317 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-8330 | Analyzed | 未確認 | CWE-532 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have a |
| CVE-2026-8335 | Awaiting Analysis | 未確認 | CWE-306 | A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as |
| CVE-2026-8356 | Deferred | 未確認 | CWE-121, CWE-787 | LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size colour tables were |
| CVE-2026-8357 | Deferred | 未確認 | CWE-131, CWE-193, CWE-787 | LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens. The array that |
| CVE-2026-8358 | Deferred | 未確認 | CWE-787, CWE-843 | LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the same change identifier for two different kinds of |
| CVE-2026-8365 | Deferred | 未確認 | CWE-502 | The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_meta' REST API field and the V200 database migration in vers |
| CVE-2026-8378 | Deferred | 未確認 | The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before storing it as post meta | |
| CVE-2026-8379 | Deferred | 未確認 | The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated attackers to downloa | |
| CVE-2026-8380 | Deferred | 未確認 | The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deletion, allowing authenticated users wit | |
| CVE-2026-8383 | Deferred | 未確認 | CWE-862 | The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST endpoint behind the `edit_users` capability, allowing unauthenticated visitors to |
| CVE-2026-8385 | Deferred | 未確認 | CWE-200 | The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax fallback for its datatables route, allowing unauthenticated v |
| CVE-2026-8386 | Deferred | 未確認 | The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve | |
| CVE-2026-8402 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Eksagate Electronic Engineering and Computer Industry Trade Inc. SYSGUARD 6001 |
| CVE-2026-8403 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Eksagate Electronic Engineering and Computer Industry Trade Inc. SYSGUARD 6001 |
| CVE-2026-8404 | Analyzed | 未確認 | CWE-178 | An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match `Cache-Control` response directiv |
| CVE-2026-8406 | Deferred | 未確認 | CWE-639 | openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent- |
| CVE-2026-8422 | Deferred | 未確認 | CWE-352 | The Remove meta boxes per user role plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.01. This is due to missing or incorrect |
| CVE-2026-8438 | Deferred | 未確認 | CWE-79 | The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.4.7. This is due to insuf |
| CVE-2026-8442 | Deferred | 未確認 | CWE-22 | The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8. This is due to missing authorization checks on the wp |
| CVE-2026-8443 | Deferred | 未確認 | CWE-89 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameters of the wppro_get_overall_chart_data AJAX action in version |
| CVE-2026-8444 | Deferred | 未確認 | CWE-89 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpfb_find_reviews AJAX action in versions up to, and including, |
| CVE-2026-8451 | Analyzed | 未確認 | CWE-125 | Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP |
| CVE-2026-8452 | Analyzed | 掲載 | CWE-119 | Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway ( |
| CVE-2026-8461 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote |
| CVE-2026-8464 | Deferred | 未確認 | CWE-22 | Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's ope |
| CVE-2026-8474 | Deferred | 未確認 | CWE-79 | A vulnerability was discovered on Stormshield Network Security * 4.3.0 to 4.3.41, * 4.8.0 to 4.8.15, * 5.0.0 to 5.0.5 It is possible to execute a reflected |
| CVE-2026-8484 | Deferred | 未確認 | CWE-122 | A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to he |
| CVE-2026-8494 | Deferred | 未確認 | CWE-79 | The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in the admin URI Editor interface in all versions up to, and including, |
| CVE-2026-8499 | Deferred | 未確認 | CWE-843 | The Helpfulcrowd Product Reviews plugin for WordPress is vulnerable to Authorization Bypass via PHP Type Juggling in versions up to, and including, 1.2.9. This is due to the `helpf |
| CVE-2026-8501 | Awaiting Analysis | 未確認 | CWE-782 | Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and i |
| CVE-2026-8502 | Deferred | 未確認 | CWE-862 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, |
| CVE-2026-8589 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have |
| CVE-2026-8592 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text o |
| CVE-2026-8599 | Deferred | 未確認 | CWE-79 | The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Fie |
| CVE-2026-8607 | Deferred | 未確認 | CWE-79 | The Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wrap' Shor |
| CVE-2026-8608 | Deferred | 未確認 | CWE-345 | The Event Monster – Event Management, Events Calendar, Tickets plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including |
| CVE-2026-8611 | Deferred | 未確認 | CWE-639 | The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoice_id' parameter d |
| CVE-2026-8613 | Deferred | 未確認 | CWE-79 | The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title_tag' Widget Setting in all versions up to, and including, 1.1.8 due to |
| CVE-2026-8614 | Deferred | 未確認 | CWE-862 | The Assistio plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the assistio_plugin_delete_ |
| CVE-2026-8617 | Deferred | 未確認 | CWE-862 | The SearchPlus plugin for WordPress is vulnerable to unauthorized modification and deletion of data in versions up to, and including, 1.7.1. This is due to a missing capability che |
| CVE-2026-8622 | Deferred | 未確認 | CWE-79 | The Image Sizes on Demand plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Server Variable in all versions up to, and including, 1.3 due to insuffi |
| CVE-2026-8628 | Deferred | 未確認 | CWE-79 | The EntreDroppers plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 1.1.2 due to insufficient input |
| CVE-2026-8636 | Analyzed | 未確認 | CWE-316 | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can |
| CVE-2026-8637 | Awaiting Analysis | 未確認 | CWE-427 | A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code wi |
| CVE-2026-8643 | Modified | 未確認 | CWE-22 | pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points |
| CVE-2026-8644 | Analyzed | 未確認 | CWE-290 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing. |
| CVE-2026-8646 | Analyzed | 未確認 | CWE-444 | IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker co |
| CVE-2026-8653 | Deferred | 未確認 | CWE-89 | The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in all versions up to, and including, 4.8.20 due to insufficien |
| CVE-2026-8655 | Analyzed | 未確認 | CWE-119 | Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured |
| CVE-2026-8658 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parame |
| CVE-2026-8659 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port para |
| CVE-2026-8660 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter |
| CVE-2026-8661 | Awaiting Analysis | 未確認 | CWE-79, CWE-918 | Server-Side Request Forgery in the markdown_to_pdf action of Rapid7 InsightConnect Markdown Plugin on Linux in versions prior to 4.0.2 allows remote attackers to make arbitrary out |
| CVE-2026-8662 | Analyzed | 未確認 | CWE-22 | Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths vi |
| CVE-2026-8663 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameter |
| CVE-2026-8664 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters d |
| CVE-2026-8665 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expr |
| CVE-2026-8666 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the hos |
| CVE-2026-8668 | Deferred | 未確認 | CWE-523 | A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The cr |
| CVE-2026-8677 | Deferred | 未確認 | CWE-79 | The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Widget HTML Tag Settings in all ve |
| CVE-2026-8683 | Analyzed | 未確認 | CWE-770 | Mattermost Desktop App versions <=6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to cra |
| CVE-2026-8688 | Deferred | 未確認 | CWE-862 | The Advance Nav Menu Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.3. This is due to the plugin not properly verifying |
| CVE-2026-8690 | Deferred | 未確認 | CWE-862 | The RentMy Real-Time Rental Management Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.4.1. This is due to the plugin no |
| CVE-2026-8694 | Analyzed | 未確認 | CWE-306 | Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST |
| CVE-2026-8705 | Deferred | 未確認 | CWE-89 | The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the `pagseguro[metodo]` POST parameter of the `clearsale_total_push` AJAX action in all versions up to, |
| CVE-2026-8713 | Deferred | 未確認 | CWE-22 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybe_delete_files function in all versions |
| CVE-2026-8714 | Analyzed | 未確認 | CWE-20 | A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger |
| CVE-2026-8720 | Analyzed | 未確認 | CWE-354 | wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key |
| CVE-2026-8722 | Modified | 未確認 | CWE-150, CWE-93 | Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untruste |
| CVE-2026-8762 | Rejected | 未確認 | Rejected reason: After analysis, the originally reported behaviour was determined not to constitute a security vulnerability. The findings were parser-strictness defects without an | |
| CVE-2026-8795 | Awaiting Analysis | 未確認 | CWE-116, CWE-74, CWE-94 | A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a col |
| CVE-2026-8797 | Deferred | 未確認 | CWE-782 | An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM |
| CVE-2026-8805 | Deferred | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module FX5-EIP versions 1.000 and prior allow |
| CVE-2026-8806 | Deferred | 未確認 | CWE-440 | Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial- |
| CVE-2026-8811 | Deferred | 未確認 | CWE-22 | SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intend |
| CVE-2026-8823 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-privileged administrator to degrade arbitr |
| CVE-2026-8828 | Awaiting Analysis | 未確認 | CWE-639 | A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any t |
| CVE-2026-8829 | Modified | 未確認 | CWE-416 | HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the e |
| CVE-2026-8833 | Analyzed | 未確認 | CWE-79 | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to |
| CVE-2026-8839 | Deferred | 未確認 | CWE-639 | The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.96.6. This is due to |
| CVE-2026-8841 | Deferred | 未確認 | CWE-79 | The Extra Settings for RocketChat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rocketchat' shortcode's 'title' attribute in versions up to, and includ |
| CVE-2026-8853 | Deferred | 未確認 | CWE-79 | The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sani |
| CVE-2026-8858 | Modified | 未確認 | CWE-94 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in comp |
| CVE-2026-8863 | Deferred | 未確認 | Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use | |
| CVE-2026-8864 | Awaiting Analysis | 未確認 | CWE-428 | The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to mitigate this potential vulnerabilit |
| CVE-2026-8865 | Deferred | 未確認 | CWE-79 | The Avalon23 Products Filter for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'avalon23_qr' shortcode in all versions up to, and including, |
| CVE-2026-8874 | Analyzed | 未確認 | CWE-319 | Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in |
| CVE-2026-8876 | Analyzed | 未確認 | CWE-798 | Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site da |
| CVE-2026-8878 | Analyzed | 未確認 | CWE-326 | Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists o |
| CVE-2026-8879 | Analyzed | 未確認 | CWE-829 | Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime. This script is NO |
| CVE-2026-8880 | Deferred | 未確認 | CWE-79 | The RomanCart Ecommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blclass' attribute (and other attributes) of the romancart_button shortcode in ve |
| CVE-2026-8881 | Analyzed | 未確認 | Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single ite | |
| CVE-2026-8882 | Deferred | 未確認 | CWE-79 | The WP ApplicantStack Jobs Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.1.1 due to ins |
| CVE-2026-8883 | Deferred | 未確認 | CWE-79 | The Global Body Mass Index Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gbmicalc' shortcode in versions up to, and including, 1.2. This is |
| CVE-2026-8885 | Deferred | 未確認 | CWE-79 | The DeMomentSomTres Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'callout' shortcode in all versions up to, and including, 1.1.1. T |
| CVE-2026-8888 | Analyzed | 未確認 | CWE-1333, CWE-917 | Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp() without compl |
| CVE-2026-8889 | Modified | 未確認 | CWE-407 | Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes). |
| CVE-2026-8893 | Deferred | 未確認 | CWE-79 | The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the [stripe-express] shortcode in versions up to, and i |
| CVE-2026-8895 | Deferred | 未確認 | CWE-79 | The kk blog card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'blog-card' shortcode in all versions up to, and including, 1.3. This is due to |
| CVE-2026-8896 | Deferred | 未確認 | CWE-79 | The MIR blocks and shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute (and other attributes such as 'ready_animation_text') of t |
| CVE-2026-8900 | Deferred | 未確認 | CWE-79 | The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.2.8 due to insufficient |
| CVE-2026-8901 | Deferred | 未確認 | CWE-79 | The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Submission Da |
| CVE-2026-8902 | Deferred | 未確認 | CWE-352 | The AJAX Report Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4. This is due to missing or incorrect nonce val |
| CVE-2026-8904 | Deferred | 未確認 | CWE-352 | The FastPicker, an order picker and order management system (oms) for WooCommerce on steroids plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to |
| CVE-2026-8905 | Deferred | 未確認 | CWE-352 | The Osiris Signature Banner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due to missing or incorrect nonce va |
| CVE-2026-8907 | Deferred | 未確認 | CWE-352 | The WP-Ultimate-Map plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1. This is due to missing nonce validation on the process_i |
| CVE-2026-8909 | Deferred | 未確認 | CWE-352 | The WpMobi plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.3. This is due to missing or incorrect nonce validation on the |
| CVE-2026-8910 | Deferred | 未確認 | CWE-352 | The WP Emoticon Rating plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce valid |
| CVE-2026-8913 | Deferred | 未確認 | CWE-78 | A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v5 due to improper neutralization of user-controlled input within the web management |
| CVE-2026-8914 | Awaiting Analysis | 未確認 | CWE-95 | In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-pro |
| CVE-2026-8916 | Deferred | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects rlottie: before dcfde72eae1b0464dc0dd760aec00ada6a148635. |
| CVE-2026-8918 | Deferred | 未確認 | CWE-183 | A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing |
| CVE-2026-8931 | Deferred | 未確認 | CWE-94 | A critical Remote Code Execution (RCE) vulnerability exists in Disig Web Signer versions 2.0.3 through 2.5.3. |
| CVE-2026-8934 | Awaiting Analysis | 未確認 | CWE-862 | A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sen |
| CVE-2026-8935 | Deferred | 未確認 | The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map sc | |
| CVE-2026-8936 | Awaiting Analysis | 未確認 | CWE-674 | Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry |
| CVE-2026-8940 | Deferred | 未確認 | CWE-352 | The WP Meta Sort Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9. This is due to missing or incorrect nonce validat |
| CVE-2026-8944 | Deferred | 未確認 | CWE-352 | The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1. This is due to missing or |
| CVE-2026-8976 | Deferred | 未確認 | CWE-862 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, a |
| CVE-2026-8977 | Deferred | 未確認 | CWE-79 | The WP GDPR Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ninja_gdpr_ajax_actions' AJAX action in versions up to, and including, 1.0.0. |
| CVE-2026-8978 | Deferred | 未確認 | CWE-89 | The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, an |
| CVE-2026-8981 | Deferred | 未確認 | CWE-79 | The Custom Block Builder WordPress plugin before 4.3.0 does not consistently check the unfiltered_html capability across all paths that write to its block template code fields, al |
| CVE-2026-8991 | Deferred | 未確認 | CWE-79 | The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Set |
| CVE-2026-8993 | Deferred | 未確認 | CWE-200, CWE-74 | D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be explo |
| CVE-2026-9002 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to cause a denial of service due to improper validation in the XDF decoder. The application pro |
| CVE-2026-9006 | Analyzed | 未確認 | CWE-918 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized re |
| CVE-2026-9008 | Deferred | 未確認 | CWE-862 | The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. This is due to the pagelist_unqprfx_ext_shortcode() function (t |
| CVE-2026-9013 | Deferred | 未確認 | CWE-862 | The Bogo plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the bogo_rest_create_post_translation. This makes it p |
| CVE-2026-9016 | Deferred | 未確認 | CWE-117 | The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Improper Output Neutralization for Logs in all versions up to, and including, |
| CVE-2026-9019 | Deferred | 未確認 | CWE-79 | The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters in all |
| CVE-2026-9024 | Awaiting Analysis | 未確認 | CWE-79 | A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIEN |
| CVE-2026-9029 | Modified | 未確認 | CWE-79 | A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the bro |
| CVE-2026-9045 | Awaiting Analysis | 未確認 | CWE-306 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authe |
| CVE-2026-9048 | Deferred | 未確認 | CWE-863 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible |
| CVE-2026-9050 | Deferred | 未確認 | CWE-862 | The Slider Revolution plugin for WordPress in versions 6.0.0-6.7.55 and 7.0.0-7.0.14 is vulnerable to unauthorized modification of data. This is due to the plugin not properly veri |
| CVE-2026-9060 | Deferred | 未確認 | CWE-79 | The Store Locator WordPress plugin before 1.6.6 does not sanitize and escape one of its settings before storing it and outputting it on the Store Locator WordPress plugin before 1. |
| CVE-2026-9061 | Deferred | 未確認 | CWE-79 | The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and outputting it on the Store Locator WordPress plugin before 1. |
| CVE-2026-9062 | Deferred | 未確認 | CWE-22 | The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrar |
| CVE-2026-9067 | Deferred | 未確認 | CWE-434 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual c |
| CVE-2026-9071 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a sp |
| CVE-2026-9072 | Modified | 未確認 | CWE-94 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to |
| CVE-2026-9073 | Modified | 未確認 | CWE-532 | A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One mechanism logs sessio |
| CVE-2026-9076 | Analyzed | 未確認 | CWE-125 | Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap ou |
| CVE-2026-9083 | Analyzed | 未確認 | CWE-22 | A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter w |
| CVE-2026-9086 | Analyzed | 未確認 | CWE-79 | A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to client registration endpoints, could |
| CVE-2026-9088 | Awaiting Analysis | 未確認 | CWE-1220 | A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group mem |
| CVE-2026-9099 | Analyzed | 未確認 | CWE-639 | A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint within the Admin REST API allows an authenticated user with limited administrat |
| CVE-2026-9105 | Analyzed | 未確認 | CWE-121, CWE-787 | An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP r |
| CVE-2026-9106 | Analyzed | 未確認 | CWE-451 | A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's runner management. |
| CVE-2026-9109 | Deferred | 未確認 | CWE-79 | The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Transla |
| CVE-2026-9125 | Deferred | 未確認 | CWE-79 | The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_url' parameter of the [presto_player_overlay] shortcode in versions up to, and inc |
| CVE-2026-9132 | Analyzed | 未確認 | CWE-862 | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to read source code from private repositories they did not have |
| CVE-2026-9134 | Deferred | 未確認 | CWE-79 | The FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_attribute_key' shortcode parameter in versions up to, and including, 3.1.31 This is |
| CVE-2026-9142 | Analyzed | 未確認 | CWE-306 | There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthent |
| CVE-2026-9143 | Analyzed | 未確認 | CWE-681 | There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value |
| CVE-2026-9151 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenti |
| CVE-2026-9153 | Analyzed | 未確認 | CWE-200, CWE-22 | Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficie |
| CVE-2026-9154 | Analyzed | 未確認 | CWE-22 | Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the |
| CVE-2026-9155 | Analyzed | 未確認 | CWE-78 | OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to |
| CVE-2026-9158 | Analyzed | 未確認 | CWE-416 | In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This allows subsequent com |
| CVE-2026-9162 | Analyzed | 未確認 | CWE-613 | Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to invalidate cached authentication state for active WebSocket connections during |
| CVE-2026-9172 | Deferred | 未確認 | CWE-862 | The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to unauthorized modification/deletion of data due to a missing capability check on |
| CVE-2026-9175 | Deferred | 未確認 | CWE-862 | The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.0. This is due |
| CVE-2026-9178 | Deferred | 未確認 | CWE-862 | The WP Forms Connector plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.8. The plugin registers the REST route wp/v3/user/list/<id |
| CVE-2026-9179 | Deferred | 未確認 | CWE-89 | The WP Forms Connector plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/wp/v3/post/list REST endpoint in versions up to and including 1 |
| CVE-2026-9183 | Deferred | 未確認 | CWE-200 | The 24liveblog - live blog tool plugin for WordPress is vulnerable to Exposure of Sensitive Information in versions up to, and including, 2.2. This is due to the lb24_block_enqueue |
| CVE-2026-9184 | Deferred | 未確認 | CWE-862 | The 24liveblog - live blog tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_lb24_token() AJAX function i |
| CVE-2026-9185 | Deferred | 未確認 | CWE-639 | The 6Storage Rentals plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.22.0 via the `userId` parameter of |
| CVE-2026-9187 | Deferred | 未確認 | CWE-862 | The Abandoned Contact Form 7 plugin for WordPress is vulnerable to unauthorized arbitrary post deletion in versions up to, and including, 2.2. This is due to a missing capability c |
| CVE-2026-9197 | Deferred | 未確認 | CWE-22 | The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. This makes it possibl |
| CVE-2026-9199 | Deferred | 未確認 | CWE-862 | The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi |
| CVE-2026-9204 | Analyzed | 未確認 | CWE-918 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could ha |
| CVE-2026-9210 | Analyzed | 未確認 | CWE-20 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of rou |
| CVE-2026-9211 | Analyzed | 未確認 | CWE-20 | An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation. |
| CVE-2026-9212 | Analyzed | 未確認 | CWE-20, CWE-306 | Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality |
| CVE-2026-9213 | Analyzed | 未確認 | CWE-20 | A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code o |
| CVE-2026-9219 | Deferred | 未確認 | CWE-340 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable registration ID derived from IMEI. The enrollment system lacks additional authenti |
| CVE-2026-9220 | Deferred | 未確認 | CWE-321 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES keys and initialization |
| CVE-2026-9221 | Deferred | 未確認 | CWE-327 | The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request signature for authenticating communications between the mobile |
| CVE-2026-9222 | Deferred | 未確認 | CWE-836 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could |
| CVE-2026-9233 | Deferred | 未確認 | CWE-862 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due t |
| CVE-2026-9234 | Deferred | 未確認 | CWE-862 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.4.1. This is due to missing capability checks and |
| CVE-2026-9242 | Deferred | 未確認 | CWE-345 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Verificat |
| CVE-2026-9258 | Analyzed | 未確認 | CWE-295 | Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
| CVE-2026-9259 | Analyzed | 未確認 | CWE-295 | Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
| CVE-2026-9260 | Analyzed | 未確認 | CWE-321, CWE-798 | Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
| CVE-2026-9261 | Analyzed | 未確認 | CWE-327 | Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
| CVE-2026-9262 | Analyzed | 未確認 | CWE-1188 | Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier |
| CVE-2026-9263 | Analyzed | 未確認 | CWE-125 | The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment. Per the Bluet |
| CVE-2026-9265 | Deferred | 未確認 | CWE-125 | Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_attribute() copies a UTF8STRING ASN.1 attribute value into a |
| CVE-2026-9266 | Awaiting Analysis | 未確認 | CWE-325 | A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an |
| CVE-2026-9267 | Deferred | 未確認 | CWE-125 | Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds read vulnerability in the check_server_certificate() function that allows unauthen |
| CVE-2026-9269 | Deferred | 未確認 | The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege users such | |
| CVE-2026-9270 | Analyzed | 未確認 | CWE-150, CWE-93 | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted s |
| CVE-2026-9271 | Deferred | 未確認 | Vulnerability Title | |
| CVE-2026-9278 | Deferred | 未確認 | The Form Builder CP WordPress plugin before 1.2.47 does not properly sanitize a form configuration value before storing it and using it as part of a client-side script execution, a | |
| CVE-2026-9279 | Deferred | 未確認 | CWE-78 | Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name (e.g. `git`, `pandoc`, `grep`), the argument |
| CVE-2026-9280 | Deferred | 未確認 | CWE-79 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Parameters in iframe Mode in all versions up to, and includi |
| CVE-2026-9281 | Deferred | 未確認 | CWE-79 | The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jtlma_cus |
| CVE-2026-9290 | Deferred | 未確認 | CWE-22 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the (profile tem |
| CVE-2026-9307 | Awaiting Analysis | 未確認 | CWE-497 | A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics web |
| CVE-2026-9308 | Analyzed | 未確認 | CWE-79 | Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was la |
| CVE-2026-9309 | Analyzed | 未確認 | CWE-79 | Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata. A malicious page could inject markup that changed Reader View behavior and leaked sensitive URL p |
| CVE-2026-9311 | Analyzed | 未確認 | CWE-94 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls. |
| CVE-2026-9319 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security. |
| CVE-2026-9320 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a sp |
| CVE-2026-9330 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This c |
| CVE-2026-9334 | Analyzed | 未確認 | CWE-843 | Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into |
| CVE-2026-9375 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9506 | Deferred | 未確認 | CWE-22 | This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this |
| CVE-2026-9507 | Deferred | 未確認 | CWE-38 | A session fixation vulnerability has been identified in osTicket v1.18.2. This security flaw allows an attacker to hijack a victim’s account by keeping the initial session identifi |
| CVE-2026-9516 | Analyzed | 未確認 | CWE-755, CWE-763 | Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decod |
| CVE-2026-9522 | Analyzed | 未確認 | CWE-284 | Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete ne |
| CVE-2026-9539 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g. |
| CVE-2026-9549 | Analyzed | 未確認 | CWE-79 | Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can configure |
| CVE-2026-9570 | Deferred | 未確認 | CWE-79 | The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into inline JavaScript on a frontend page containing one of its shortcod |
| CVE-2026-9576 | Deferred | 未確認 | The Fluent Booking WordPress plugin before 2.1.2 does not verify ownership of the requested group_id before exporting attendee data via the export endpoint, allowing users with at | |
| CVE-2026-9590 | Analyzed | 未確認 | CWE-284 | Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with entry edit privileges to modify asset i |
| CVE-2026-9591 | Deferred | 未確認 | CWE-352 | Cross-site request forgery (CSRF) in NewsItemApiController in SimplCommerce prior to commit 6233d73e allows an unauthenticated remote attacker to create or modify news items as an |
| CVE-2026-9594 | Deferred | 未確認 | CWE-79 | The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'location_message |
| CVE-2026-9595 | Analyzed | 未確認 | CWE-346, CWE-441 | Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and forwards it to the p |
| CVE-2026-9599 | Deferred | 未確認 | CWE-352 | The Tectite Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or incorrect nonce validation o |
| CVE-2026-9610 | Analyzed | 未確認 | CWE-425 | IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly r |
| CVE-2026-9612 | Deferred | 未確認 | CWE-200 | The WhatsOrder – Instant Checkout for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.1 via the yapacdev_ |
| CVE-2026-9614 | Awaiting Analysis | 未確認 | CWE-284 | An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access. |
| CVE-2026-9616 | Deferred | 未確認 | CWE-862 | The Generate Security.txt plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.12. This is due to the plugin not properly verifying |
| CVE-2026-9619 | Deferred | 未確認 | CWE-862 | The Reviews and Rating – Docplanner plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly v |
| CVE-2026-9620 | Deferred | 未確認 | CWE-79 | The WP Latest Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted image src attributes in post content in versions up to, and including, 5.0.11. Thi |
| CVE-2026-9629 | Deferred | 未確認 | CWE-79 | The Canvas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitizat |
| CVE-2026-9638 | Deferred | 未確認 | CWE-338 | Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for c |
| CVE-2026-9639 | Analyzed | 未確認 | CWE-476 | Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes permissions to cause |
| CVE-2026-9640 | Analyzed | 未確認 | CWE-863 | A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during s |
| CVE-2026-9641 | Deferred | 未確認 | CWE-916 | Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy sy |
| CVE-2026-9643 | Deferred | 未確認 | CWE-79 | The WP Meta SEO plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REQUEST_URI server variable in all versions up to, and including, 4.5.18. |
| CVE-2026-9648 | Deferred | 未確認 | The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the iss | |
| CVE-2026-9650 | Analyzed | 未確認 | CWE-522 | CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credent |
| CVE-2026-9651 | Analyzed | 未確認 | CWE-732 | CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an att |
| CVE-2026-9662 | Deferred | 未確認 | CWE-98 | The Recover Exit For WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.0.3. This is due to insufficient validation and sa |
| CVE-2026-9669 | Awaiting Analysis | 未確認 | CWE-121 | bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could |
| CVE-2026-9675 | Analyzed | 未確認 | CWE-400, CWE-770 | Impact: The undici WebSocket client enforces maxPayloadSize per-frame but does not enforce the cumulative size of fragmented uncompressed messages. A malicious WebSocket server can |
| CVE-2026-9676 | Deferred | 未確認 | The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscribe | |
| CVE-2026-9677 | Deferred | 未確認 | The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariff_infourl setting before outputting it in the frontend HTML via the gene | |
| CVE-2026-9678 | Analyzed | 未確認 | CWE-524 | Impact: Undici's cache interceptor incorrectly classifies some responses as cacheable when the upstream Cache-Control header uses whitespace-padded qualified private or no-cache fi |
| CVE-2026-9679 | Analyzed | 未確認 | CWE-93 | Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equi |
| CVE-2026-9690 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions. |
| CVE-2026-9691 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 versions. |
| CVE-2026-9692 | Deferred | 未確認 | CWE-338, CWE-340 | Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand |
| CVE-2026-9694 | Analyzed | 未確認 | CWE-153 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could ha |
| CVE-2026-9697 | Modified | 未確認 | CWE-295 | Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://). The target HTTPS connection through the SOCKS5 tun |
| CVE-2026-9698 | Modified | 未確認 | CWE-120, CWE-787 | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a |
| CVE-2026-9699 | Awaiting Analysis | 未確認 | CWE-532 | Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with access to server logs or s |
| CVE-2026-9702 | Deferred | 未確認 | The InPost PL WordPress plugin before 1.9.1 does not verify that the request originates from the legitimate buyer before allowing the WooCommerce order parcel-locker destination to | |
| CVE-2026-9705 | Analyzed | 未確認 | CWE-613 | A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability to r |
| CVE-2026-9709 | Deferred | 未確認 | The Cornerstone WordPress plugin before 7.8.9 does not enforce capability checks on one of its REST API routes, allowing any authenticated user to disclose the metadata of any othe | |
| CVE-2026-9710 | Deferred | 未確認 | The Cornerstone WordPress plugin before 7.8.8 does not enforce capability checks on one of its CSS-preview request handlers, and exposes the nonce needed to call it to every logged | |
| CVE-2026-9711 | Deferred | 未確認 | CWE-89 | The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full) is vulnerable to SQL Injection via the WordPress 'search' parameter in versions up to, and includi |
| CVE-2026-9716 | Analyzed | 未確認 | CWE-476 | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when ma |
| CVE-2026-9717 | Analyzed | 未確認 | CWE-78 | CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated priv |
| CVE-2026-9718 | Analyzed | 未確認 | CWE-617 | CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availability when a specially |
| CVE-2026-9719 | Deferred | 未確認 | CWE-352 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. Th |
| CVE-2026-9721 | Deferred | 未確認 | CWE-352 | The Book a Room Event Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9. This is due to missing or incorrect nonce |
| CVE-2026-9722 | Deferred | 未確認 | CWE-352 | The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5. This is due to missing or incorrect nonce validation on |
| CVE-2026-9723 | Deferred | 未確認 | CWE-352 | The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.2. This is due to missing or incorrect nonce v |
| CVE-2026-9724 | Deferred | 未確認 | CWE-352 | The MotorDesk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on |
| CVE-2026-9730 | Deferred | 未確認 | CWE-352 | The Remove NoFollow Commenter URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect no |
| CVE-2026-9732 | Deferred | 未確認 | CWE-352 | The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due t |
| CVE-2026-9733 | Deferred | 未確認 | CWE-338, CWE-340 | Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module |
| CVE-2026-9735 | Analyzed | 未確認 | CWE-532 | MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full au |
| CVE-2026-9740 | Analyzed | 未確認 | CWE-674 | A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's ha |
| CVE-2026-9741 | Analyzed | 未確認 | CWE-319 | A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in literal values for |
| CVE-2026-9742 | Analyzed | 未確認 | CWE-1287 | When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The auth |
| CVE-2026-9743 | Analyzed | 未確認 | CWE-476 | In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, th |
| CVE-2026-9746 | Analyzed | 未確認 | CWE-617 | When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges |
| CVE-2026-9747 | Analyzed | 未確認 | CWE-617 | Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server. |
| CVE-2026-9748 | Analyzed | 未確認 | CWE-617 | The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general p |
| CVE-2026-9749 | Analyzed | 未確認 | CWE-617 | This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single k |
| CVE-2026-9750 | Analyzed | 未確認 | CWE-617 | An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. |
| CVE-2026-9751 | Analyzed | 未確認 | CWE-532 | The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text. |
| CVE-2026-9752 | Analyzed | 未確認 | CWE-476 | An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-wind |
| CVE-2026-9753 | Analyzed | 未確認 | CWE-1287, CWE-787 | The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the serv |
| CVE-2026-9754 | Analyzed | 未確認 | CWE-457 | An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command |
| CVE-2026-9758 | Deferred | 未確認 | CWE-295 | Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted |
| CVE-2026-9772 | Analyzed | 未確認 | CWE-78 | Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations o |
| CVE-2026-9773 | Analyzed | 未確認 | CWE-78 | Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-9774 | Analyzed | 未確認 | CWE-22 | ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations |
| CVE-2026-9775 | Analyzed | 未確認 | CWE-22 | ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of A |
| CVE-2026-9776 | Analyzed | 未確認 | CWE-22 | ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on |
| CVE-2026-9777 | Analyzed | 未確認 | CWE-22 | ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATE |
| CVE-2026-9778 | Analyzed | 未確認 | CWE-22 | ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-9779 | Analyzed | 未確認 | CWE-347 | ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit |
| CVE-2026-9780 | Analyzed | 未確認 | CWE-79 | Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installat |
| CVE-2026-9781 | Analyzed | 未確認 | CWE-89 | Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation |
| CVE-2026-9782 | Analyzed | 未確認 | CWE-89 | Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati |
| CVE-2026-9783 | Analyzed | 未確認 | CWE-89 | Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install |
| CVE-2026-9784 | Analyzed | 未確認 | CWE-89 | Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati |
| CVE-2026-9785 | Analyzed | 未確認 | CWE-89 | Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati |
| CVE-2026-9786 | Analyzed | 未確認 | CWE-89 | Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation |
| CVE-2026-9787 | Analyzed | 未確認 | CWE-78 | Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa |
| CVE-2026-9799 | Analyzed | 未確認 | CWE-639 | A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a specif |
| CVE-2026-9800 | Modified | 未確認 | CWE-1025 | A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access |
| CVE-2026-9815 | Deferred | 未確認 | The MagicForm WordPress plugin through 0.1.3 does not properly validate the type of files uploaded through an unauthenticated AJAX action when a form's per-field extension allowlis | |
| CVE-2026-9822 | Deferred | 未確認 | The WP Hotel Booking WordPress plugin before 2.3.1 does not enforce capability checks in several of its AJAX handlers, allowing authenticated users with Subscriber-level access to | |
| CVE-2026-9829 | Deferred | 未確認 | CWE-89 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'compact_album_order_by' Shortcode Parameter in all ve |
| CVE-2026-9836 | Analyzed | 未確認 | CWE-200 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability. |
| CVE-2026-9843 | Deferred | 未確認 | CWE-22 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the view_page fu |
| CVE-2026-9844 | Deferred | 未確認 | CWE-1392 | Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface modules) allows Default Usernames and Passwords. This issue af |
| CVE-2026-9848 | Deferred | 未確認 | CWE-89 | The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and including, 6.0.4 The plugin hooks WordPress' |
| CVE-2026-9851 | Deferred | 未確認 | CWE-639 | The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, and including, 1.7.16. This is due to a missing capability ch |
| CVE-2026-9860 | Deferred | 未確認 | CWE-434 | The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10.2 via the 'account-id' para |
| CVE-2026-9862 | Analyzed | 未確認 | CWE-78 | Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the servi |
| CVE-2026-9863 | Analyzed | 未確認 | CWE-78 | Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised leg |