[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-91191 | 29 Sep 2026 | CVSS 7.5 | Lantronix G520 SeriesThe device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the… | |
| CVE-2026-84409 | 29 Sep 2026 | CVSS 7.5 | Lantronix G520 SeriesThe device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for… | |
| CVE-2026-74220 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by… | |
| CVE-2026-74221 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A… | |
| CVE-2026-74222 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data… | |
| CVE-2026-74225 | 29 Sep 2026 | CVSS 7.1 | u-bootU-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths… | |
| CVE-2026-71973 | 29 Sep 2026 | CVSS 5.2 | u-bootU-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when allocating the directory table… | |
| CVE-2026-71974 | 29 Sep 2026 | CVSS 4.8 | u-bootU-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against… | |
| CVE-2026-72507 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL… | |
| CVE-2026-72510 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection. | |
| CVE-2026-71379 | 29 Sep 2026 | CVSS 10.0 | Toptech Systems TMS7The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request. | |
| CVE-2026-71971 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in… | |
| CVE-2026-71972 | 29 Sep 2026 | CVSS 5.9 | u-bootU-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in drivers/video/video_bmp.c… | |
| CVE-2026-71189 | 29 Sep 2026 | CVSS 3.5 | Toptech Systems TMS7An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute… | |
| CVE-2026-71302 | 29 Sep 2026 | CVSS 7.1 | Toptech Systems TMS7The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to… | |
| CVE-2026-70356 | 29 Sep 2026 | CVSS 9.1 | Toptech Systems TMS7The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on… | |
| CVE-2026-69662 | 29 Sep 2026 | CVSS 3.7 | Toptech Systems TMS7The application uses unsafe functions that allow execution of inline scripts and string evaluation functions. | |
| CVE-2026-68954 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability. | |
| CVE-2026-68068 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based… | |
| CVE-2026-63713 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability. | |
| CVE-2026-102771 | 29 Sep 2026 | CVSS 4.7 | Naichen ThinkCMFA security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the… | |
| CVE-2026-102621 | 29 Sep 2026 | CVSS 3.3 | Freedesktop PopplerA vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file… | |
| CVE-2026-93853 | 29 Sep 2026 | CVSS 7.2 | EnterpriseDB BarmanUnverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud… | |
| CVE-2026-94204 | 29 Sep 2026 | CVSS 7.5 | Viidure Dashcam Android ApplicationThe central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all… | |
| CVE-2026-94952 | 29 Sep 2026 | CVSS 9.8 | VulnerabilityA stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is… | |
| CVE-2026-96587 | 29 Sep 2026 | CVSS 10.0 | Viidure Dashcam Android ApplicationThe Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access… | |
| CVE-2026-81841 | 29 Sep 2026 | CVSS 5.3 | Grafana EnterprisePausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to… | |
| CVE-2026-81842 | 29 Sep 2026 | CVSS 4.3 | Grafana EnterpriseAn authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through… | |
| CVE-2026-102938 | 29 Sep 2026 | CVSS 5.8 | virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt values verbatim to the… | Fix |
| CVE-2026-102620 | 29 Sep 2026 | CVSS 3.3 | Freedesktop PopplerA vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file… | |
| CVE-2026-102904 | 29 Sep 2026 | CVSS 5.4 | JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLsJupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0… | Fix |
| CVE-2026-102925 | 29 Sep 2026 | CVSS 7.8 | virtualenv bash and fish activation scripts execute commands embedded in pathsvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish… | Fix |
| CVE-2026-102930 | 29 Sep 2026 | CVSS 7.7 | virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before usevirtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels… | Fix |
| CVE-2026-102937 | 29 Sep 2026 | CVSS 7.3 | virtualenv: Command injection via --prompt in activate.bat (batch activator)virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchanged before… | Fix |
| CVE-2026-102253 | 29 Sep 2026 | CVSS 7.5 | esnet iperf3iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP… | |
| CVE-2026-96274 | 29 Sep 2026 | CVSS 7.4 | Baicells Nova 430H eNodeB (model pBS3101SH)In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an… | |
| CVE-2026-94953 | 29 Sep 2026 | CVSS 8.8 | VulnerabilityA stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is… | |
| CVE-2026-79535 | 29 Sep 2026 | CVSS 6.3 | Vulnerabilitymbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config set" CLI) writes a… | |
| CVE-2026-79536 | 29 Sep 2026 | CVSS 9.1 | Vulnerabilitybytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows… | |
| CVE-2026-79537 | 29 Sep 2026 | CVSS 9.1 | Vulnerabilitymetatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch. The session store… | |
| CVE-2026-79538 | 29 Sep 2026 | CVSS 9.8 | Vulnerabilitymetatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET… | |
| CVE-2026-76736 | 29 Sep 2026 | CVSS 3.3 | Hewlett Packard Enterprise (HPE) Instant ONA buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a… | |
| CVE-2026-76737 | 29 Sep 2026 | CVSS 3.0 | Hewlett Packard Enterprise (HPE) Instant ONAn authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow… | |
| CVE-2026-76738 | 29 Sep 2026 | CVSS 2.7 | Hewlett Packard Enterprise (HPE) Instant ONA buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with… | |
| CVE-2026-79348 | 29 Sep 2026 | CVSS 4.3 | VulnerabilityKitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The endpoint GET… | |
| CVE-2026-79403 | 29 Sep 2026 | CVSS 8.4 | VulnerabilityAn issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint | |
| CVE-2026-79417 | 29 Sep 2026 | CVSS 5.3 | VulnerabilityImproper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device… | |
| CVE-2026-79534 | 29 Sep 2026 | CVSS 5.9 | Vulnerabilitymark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath… | |
| CVE-2026-76729 | 29 Sep 2026 | CVSS 6.6 | Hewlett Packard Enterprise (HPE) Instant ONA format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges… | |
| CVE-2026-76730 | 29 Sep 2026 | CVSS 6.5 | Hewlett Packard Enterprise (HPE) Instant ONAn authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent… | |
| CVE-2026-76731 | 29 Sep 2026 | CVSS 6.5 | Hewlett Packard Enterprise (HPE) Instant ONAn authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to… | |
| CVE-2026-76732 | 29 Sep 2026 | CVSS 6.4 | Hewlett Packard Enterprise (HPE) Instant ONA local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this… | |
| CVE-2026-76733 | 29 Sep 2026 | CVSS 4.9 | Hewlett Packard Enterprise (HPE) Instant ONA denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with… | |
| CVE-2026-76734 | 29 Sep 2026 | CVSS 4.8 | Hewlett Packard Enterprise (HPE) Instant ONA memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a… | |
| CVE-2026-76735 | 29 Sep 2026 | CVSS 4.1 | Hewlett Packard Enterprise (HPE) Instant ONA sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation… | |
| CVE-2026-76721 | 29 Sep 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Instant ONBuffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to… | |
| CVE-2026-76722 | 29 Sep 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Instant ONUncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated… | |
| CVE-2026-76723 | 29 Sep 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Instant ONBuffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent… | |
| CVE-2026-76724 | 29 Sep 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Instant ONA command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker… | |
| CVE-2026-76725 | 29 Sep 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Instant ONA vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker… | |
| CVE-2026-76726 | 29 Sep 2026 | CVSS 8.1 | Hewlett Packard Enterprise (HPE) Instant ONAn authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass… | |
| CVE-2026-76727 | 29 Sep 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Instant ONCommand injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with… | |
| CVE-2026-76728 | 29 Sep 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Instant ONA vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a… | |
| CVE-2026-67993 | 29 Sep 2026 | CVSS 8.8 | Vulnerabilitybasecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials… | |
| CVE-2026-67987 | 29 Sep 2026 | CVSS 7.5 | Vulnerabilitycrmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in… | |
| CVE-2026-61519 | 29 Sep 2026 | CVSS 8.8 | Liberu Software Liberu CRMLiberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite… | |
| CVE-2026-39117 | 29 Sep 2026 | CVSS 9.8 | VulnerabilityAn issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via… | |
| CVE-2026-53988 | 29 Sep 2026 | CVSS 10.0 | Finsys dockhandDockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to… | |
| CVE-2026-53989 | 29 Sep 2026 | CVSS 4.7 | Finsys dockhandDockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to… | |
| CVE-2026-102875 | 29 Sep 2026 | CVSS 7.8 | videolan vlcVLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin… | |
| CVE-2026-102876 | 29 Sep 2026 | CVSS 8.1 | surrealdbSurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal-Auth-NS… | |
| CVE-2026-102877 | 29 Sep 2026 | CVSS 4.4 | getfider fiderFider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and… | |
| CVE-2026-102878 | 29 Sep 2026 | CVSS 8.1 | hangwin mcp-chrome-bridgemcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions… | |
| CVE-2026-102879 | 29 Sep 2026 | CVSS 5.0 | claraverse-space ClaraVerseClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated… | |
| CVE-2026-102327 | 29 Sep 2026 | CVSS 7.5 | Google ChromeIncorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-102328 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-102329 | 29 Sep 2026 | CVSS 6.1 | Google ChromeCross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page… | |
| CVE-2026-102330 | 29 Sep 2026 | CVSS 6.5 | Google ChromeIncorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-102331 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-102318 | 29 Sep 2026 | CVSS 4.7 | Google ChromeOut of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML… | |
| CVE-2026-102319 | 29 Sep 2026 | CVSS 3.4 | Google ChromeUninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read… | |
| CVE-2026-102320 | 29 Sep 2026 | CVSS 6.5 | Google ChromeMissing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass… | |
| CVE-2026-102321 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-102323 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-102324 | 29 Sep 2026 | CVSS 8.3 | Google ChromeUse after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-102325 | 29 Sep 2026 | CVSS 4.3 | Google ChromeUninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page… | |
| CVE-2026-102326 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-102310 | 29 Sep 2026 | CVSS 6.5 | Google ChromeMissing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-102311 | 29 Sep 2026 | CVSS 3.4 | Google ChromeUninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-102312 | 29 Sep 2026 | CVSS 4.3 | Google ChromeUI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted… | |
| CVE-2026-102313 | 29 Sep 2026 | CVSS 4.7 | Google ChromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox… | |
| CVE-2026-102314 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page… | |
| CVE-2026-102315 | 29 Sep 2026 | CVSS 3.4 | Google ChromeUninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-102316 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code… | |
| CVE-2026-102317 | 29 Sep 2026 | CVSS 8.6 | Google ChromeImproper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary… | |
| CVE-2026-102302 | 29 Sep 2026 | CVSS 8.8 | Google ChromeBuffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-102303 | 29 Sep 2026 | CVSS 4.3 | Google ChromeUninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a… | |
| CVE-2026-102304 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-102305 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-102306 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the… |
Page 138 of 168