[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105306 | 5 Oct 2026 | CVSS 6.5 | Red Hat Build of KeycloakA flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the… | |
| CVE-2026-13607 | 5 Oct 2026 | CVSS 5.9 | Unknown File Uploads Addon for WooCommerceThe File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory… | |
| CVE-2026-78371 | 5 Oct 2026 | CVSS 5.9 | Unknown File Uploads Addon for WooCommerceThe File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the… | |
| CVE-2026-105231 | 5 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA vulnerability was detected in kishor-23 food-waste-management-system… | |
| CVE-2026-105232 | 5 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c… | |
| CVE-2026-105233 | 5 Oct 2026 | CVSS 6.3 | kishor-23 food-waste-management-systemA vulnerability has been found in kishor-23 food-waste-management-system… | |
| CVE-2026-105237 | 5 Oct 2026 | CVSS 3.7 | linlinjava litemallA vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file… | |
| CVE-2026-105230 | 5 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA security vulnerability has been detected in kishor-23 food-waste-management-system… | |
| CVE-2026-105226 | 5 Oct 2026 | CVSS 4.7 | osCommerce2A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file… | |
| CVE-2026-105229 | 5 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA weakness has been identified in kishor-23 food-waste-management-system… | |
| CVE-2026-105188 | 5 Oct 2026 | CVSS 3.5 | code-projects Human Resource Management SystemA vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the… | |
| CVE-2026-105225 | 5 Oct 2026 | CVSS 4.3 | osCommerce2A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of… | |
| CVE-2026-105186 | 5 Oct 2026 | CVSS 6.3 | itsourcecode Online Admission SystemA flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of… | |
| CVE-2026-105187 | 5 Oct 2026 | CVSS 6.3 | itsourcecode Online Admission SystemA vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The… | |
| CVE-2026-105185 | 5 Oct 2026 | CVSS 7.3 | itsourcecode Online Admission SystemA vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php… | |
| CVE-2026-105181 | 5 Oct 2026 | CVSS 6.3 | itsourcecode Online Admission SystemA vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The… | |
| CVE-2026-105182 | 5 Oct 2026 | CVSS 7.3 | SourceCodester Online Reviewer Management SystemA security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file… | |
| CVE-2026-105183 | 5 Oct 2026 | CVSS 7.3 | itsourcecode Online Admission SystemA weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file… | |
| CVE-2026-105184 | 5 Oct 2026 | CVSS 7.3 | itsourcecode Online Admission SystemA security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file… | |
| CVE-2026-20588 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious… | |
| CVE-2026-20589 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has… | |
| CVE-2026-20540 | 5 Oct 2026 | CVSS 5.3 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to… | |
| CVE-2026-20541 | 5 Oct 2026 | CVSS 5.3 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has… | |
| CVE-2026-20542 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has… | |
| CVE-2026-20543 | 5 Oct 2026 | CVSS 5.5 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional… | |
| CVE-2026-20544 | 5 Oct 2026 | CVSS 6.8 | MediaTek, Inc. MediaTek chipsetIn meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has… | |
| CVE-2026-20579 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has… | |
| CVE-2026-20586 | 5 Oct 2026 | CVSS 8.8 | MediaTek, Inc. MediaTek chipsetIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional… | |
| CVE-2026-20587 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has… | |
| CVE-2026-20532 | 5 Oct 2026 | CVSS 6.2 | MediaTek, Inc. MediaTek chipsetIn apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges… | |
| CVE-2026-20533 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious… | |
| CVE-2026-20534 | 5 Oct 2026 | CVSS 5.3 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected… | |
| CVE-2026-20535 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a… | |
| CVE-2026-20536 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has… | |
| CVE-2026-20537 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has… | |
| CVE-2026-20538 | 5 Oct 2026 | CVSS 5.3 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has… | |
| CVE-2026-20539 | 5 Oct 2026 | CVSS 5.3 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to… | |
| CVE-2026-20524 | 5 Oct 2026 | CVSS 8.4 | MediaTek, Inc. MediaTek chipsetIn apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional… | |
| CVE-2026-20525 | 5 Oct 2026 | CVSS 5.3 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a… | |
| CVE-2026-20526 | 5 Oct 2026 | CVSS 7.5 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has… | |
| CVE-2026-20527 | 5 Oct 2026 | CVSS 5.3 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a… | |
| CVE-2026-20528 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory… | |
| CVE-2026-20529 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious… | |
| CVE-2026-20530 | 5 Oct 2026 | CVSS 6.7 | MediaTek, Inc. MediaTek chipsetIn display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious… | |
| CVE-2026-20531 | 5 Oct 2026 | CVSS 8.4 | MediaTek, Inc. MediaTek chipsetIn apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution… | |
| CVE-2026-105179 | 5 Oct 2026 | CVSS 2.7 | SourceCodester Drug Recommendation SystemA weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of… | |
| CVE-2026-105180 | 5 Oct 2026 | CVSS 6.3 | JeebaseA vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component… | |
| CVE-2026-20519 | 5 Oct 2026 | CVSS 7.5 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has… | |
| CVE-2026-20520 | 5 Oct 2026 | CVSS 7.5 | MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has… | |
| CVE-2026-20521 | 5 Oct 2026 | CVSS 8.4 | MediaTek, Inc. MediaTek chipsetIn Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no… | |
| CVE-2026-20522 | 5 Oct 2026 | CVSS 8.4 | MediaTek, Inc. MediaTek chipsetIn neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… | |
| CVE-2026-20523 | 5 Oct 2026 | CVSS 8.4 | MediaTek, Inc. MediaTek chipsetIn neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… | |
| CVE-2026-105177 | 5 Oct 2026 | CVSS 4.7 | SourceCodester Drug Recommendation SystemA vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file… | |
| CVE-2026-105178 | 5 Oct 2026 | CVSS 4.7 | SourceCodester Drug Recommendation SystemA security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string… | |
| CVE-2026-105176 | 5 Oct 2026 | CVSS 4.7 | SourceCodester Drug Recommendation SystemA vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php… | |
| CVE-2026-105295 | 5 Oct 2026 | CVSS 7.5 | GitAheadGitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and… | |
| CVE-2026-105174 | 5 Oct 2026 | CVSS 5.4 | GerapyA vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py… | |
| CVE-2026-105175 | 5 Oct 2026 | CVSS 7.3 | SourceCodester Drug Recommendation SystemA vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file… | |
| CVE-2026-105223 | 5 Oct 2026 | CVSS 7.4 | maclof kubernetes-clientmaclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig… | |
| CVE-2026-105292 | 5 Oct 2026 | CVSS 5.9 | ChatermChaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending… | |
| CVE-2026-105293 | 5 Oct 2026 | CVSS 8.1 | LegcordLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes… | |
| CVE-2026-105294 | 5 Oct 2026 | CVSS 7.4 | LegcordLegcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the… | |
| CVE-2026-105172 | 5 Oct 2026 | CVSS 7.3 | itsourcecode Online Admission SystemA vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file… | |
| CVE-2026-105173 | 5 Oct 2026 | CVSS 3.5 | code-projects Human Resource ManagementA flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file… | |
| CVE-2026-105168 | 5 Oct 2026 | CVSS 6.3 | kishor-23 food-waste-management-systemA vulnerability was identified in kishor-23 food-waste-management-system… | |
| CVE-2026-105169 | 5 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA security flaw has been discovered in kishor-23 food-waste-management-system… | |
| CVE-2026-105170 | 5 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA weakness has been identified in kishor-23 food-waste-management-system… | |
| CVE-2026-105171 | 5 Oct 2026 | CVSS 6.3 | kishor-23 food-waste-management-systemA security vulnerability has been detected in kishor-23 food-waste-management-system… | |
| CVE-2026-105166 | 4 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA vulnerability was found in kishor-23 food-waste-management-system… | |
| CVE-2026-105167 | 4 Oct 2026 | CVSS 7.3 | kishor-23 food-waste-management-systemA vulnerability was determined in kishor-23 food-waste-management-system… | |
| CVE-2026-105220 | 4 Oct 2026 | CVSS 7.8 | klembot twinejsTwine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the… | |
| CVE-2026-105221 | 4 Oct 2026 | CVSS 7.4 | defunkt gistThe gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic… | |
| CVE-2026-105222 | 4 Oct 2026 | CVSS 7.4 | alexpechkarev google-mapsThe alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets… | |
| CVE-2026-105165 | 4 Oct 2026 | CVSS 6.3 | devopspolis secrets-replicatorA vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_secret of the file… | |
| CVE-2026-105164 | 4 Oct 2026 | CVSS 2.7 | NASA cFSA flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file… | |
| CVE-2026-105163 | 4 Oct 2026 | CVSS 5.3 | crossplane-runtimeA vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file… | |
| CVE-2026-105216 | 4 Oct 2026 | CVSS 7.4 | micro go-microgo-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the… | |
| CVE-2026-105217 | 4 Oct 2026 | CVSS 3.1 | cockpit-hq cockpitCockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to… | |
| CVE-2026-105218 | 4 Oct 2026 | CVSS 7.4 | go-pay gopaygopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to… | |
| CVE-2026-105219 | 4 Oct 2026 | CVSS 7.5 | mwilliamson mammoth.jsMammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in… | |
| CVE-2026-105161 | 4 Oct 2026 | CVSS 5.3 | invariant-systems-ai aiirA flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler… | |
| CVE-2026-105086 | 4 Oct 2026 | CVSS 8.7 | WWBN AVideoWWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting… | |
| CVE-2026-105089 | 4 Oct 2026 | CVSS 8.7 | WWBN AVideoWWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting… | |
| CVE-2026-105224 | 4 Oct 2026 | CVSS 5.4 | yeswikiYesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering… | |
| CVE-2026-104402 | 4 Oct 2026 | CVSS 4.3 | farvisun Mindio Magic MCPInsertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive… | |
| CVE-2026-105209 | 4 Oct 2026 | CVSS 9.6 | zitadelZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless enrollment… | |
| CVE-2026-105210 | 4 Oct 2026 | CVSS 8.2 | zitadelZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and… | |
| CVE-2026-105211 | 4 Oct 2026 | CVSS 8.1 | zitadelZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by… | |
| CVE-2026-105212 | 4 Oct 2026 | CVSS 7.5 | zitadelZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or… | |
| CVE-2026-105213 | 4 Oct 2026 | CVSS 8.2 | zitadelZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's… | |
| CVE-2026-105214 | 4 Oct 2026 | CVSS 2.3 | zitadelZitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources… | |
| CVE-2026-105215 | 4 Oct 2026 | CVSS 9.1 | zitadelZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found'… | |
| CVE-2026-105158 | 4 Oct 2026 | CVSS 7.3 | RainyGao DocSysA vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file… | |
| CVE-2026-105205 | 4 Oct 2026 | CVSS 5.3 | siyuan-note siyuanSiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference… | |
| CVE-2026-105206 | 4 Oct 2026 | CVSS 5.3 | zitadelZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against… | |
| CVE-2026-105207 | 4 Oct 2026 | CVSS 9.8 | zitadelZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary… | |
| CVE-2026-105208 | 4 Oct 2026 | CVSS 7.7 | zitadelZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users… | |
| CVE-2026-105156 | 4 Oct 2026 | CVSS 3.7 | YzmCMSA weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component… | |
| CVE-2026-105157 | 4 Oct 2026 | CVSS 4.3 | RainyGao DocSysA security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file… | |
| CVE-2026-105148 | 4 Oct 2026 | CVSS 7.3 | SciPhi-AI R2RA vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the… |
Page 121 of 168