[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-6086 | 25 Sep 2026 | CVSS 5.1 | Novadigits technologies StockAgileStored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST… | |
| CVE-2026-6087 | 25 Sep 2026 | CVSS 5.1 | Novadigits technologies StockAgileStored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST… | |
| CVE-2026-6088 | 25 Sep 2026 | CVSS 5.1 | Novadigits technologies StockAgileStored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST… | |
| CVE-2026-94573 | 25 Sep 2026 | CVSS 7.2 | addonsorg Repeater Fields for Elementor FormsThe Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up… | |
| CVE-2026-95864 | 25 Sep 2026 | CVSS 7.2 | themifyme Themify BuilderThe Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[fonts]' Parameter in all versions up to, and… | |
| CVE-2026-95866 | 25 Sep 2026 | CVSS 7.2 | cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role EditorThe User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored… | |
| CVE-2026-96448 | 25 Sep 2026 | CVSS 6.6 | Red Hat Build of KeycloakA flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access management solution. The issue occurs… | |
| CVE-2026-96568 | 25 Sep 2026 | CVSS 7.2 | jetmonsters Restaurant Menu and Food OrderingThe Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone_number' parameter in all… | |
| CVE-2026-96752 | 25 Sep 2026 | CVSS 7.2 | bmarshall511 Zero Spam for WordPressThe Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7… | |
| CVE-2026-92608 | 25 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache Qpid Broker-JImproper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt… | |
| CVE-2026-92609 | 25 Sep 2026 | CVSS 9.8 | Apache Software Foundation Apache Qpid Broker-JSession fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via… | |
| CVE-2026-92713 | 25 Sep 2026 | CVSS 8.1 | wpchill Modula Image Gallery – Photo Grid & Video GalleryThe Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path… | |
| CVE-2026-93654 | 25 Sep 2026 | CVSS 7.2 | codename065 Premium Packages – Sell Digital Products SecurelyThe Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | |
| CVE-2026-93656 | 25 Sep 2026 | CVSS 6.4 | cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role EditorThe User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored… | |
| CVE-2026-93747 | 25 Sep 2026 | CVSS 6.4 | tomdever wpForo ForumThe wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'telegram' profile field in versions up to, and including… | |
| CVE-2026-93901 | 25 Sep 2026 | CVSS 7.3 | ihomefinder Optima Express IDXThe Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5. This is due to the… | |
| CVE-2026-17577 | 25 Sep 2026 | CVSS 6.1 | sslzen SSL Zen — SSL Certificate Installer & HTTPS RedirectsThe SSL Zen plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'uri' (and 'host') parameters in versions up to, and… | |
| CVE-2026-17602 | 25 Sep 2026 | CVSS 4.9 | sslzen SSL Zen — SSL Certificate Installer & HTTPS RedirectsThe SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and… | |
| CVE-2026-19804 | 25 Sep 2026 | CVSS 8.8 | clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access SubscriptionsThe s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable… | |
| CVE-2026-84280 | 25 Sep 2026 | CVSS 7.2 | radykal Fancy Product DesignerThe Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter in all… | |
| CVE-2026-88996 | 25 Sep 2026 | CVSS 6.1 | smub WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & MoreThe WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Reflected… | |
| CVE-2026-89406 | 25 Sep 2026 | CVSS 7.5 | wpchill Modula Image Gallery – Photo Grid & Video GalleryThe Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in… | |
| CVE-2026-89426 | 25 Sep 2026 | CVSS 8.8 | knitpay Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and moreThe Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and… | |
| CVE-2026-13179 | 25 Sep 2026 | CVSS 6.4 | flippercode WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & ListingsThe WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site… | |
| CVE-2026-13456 | 25 Sep 2026 | CVSS 7.5 | flippercode WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & ListingsThe WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion… | |
| CVE-2026-12037 | 25 Sep 2026 | CVSS 5.5 | gabelivan Asset CleanUp: Page Speed BoosterThe Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5… | |
| CVE-2026-96766 | 25 Sep 2026 | CVSS 6.4 | paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings DirectoryThe GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | |
| CVE-2026-97846 | 25 Sep 2026 | CVSS 6.8 | Red Hat Build of KeycloakKeycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that originally requested it… | |
| CVE-2026-93399 | 25 Sep 2026 | CVSS 9.1 | ladela Online Scheduling and Appointment Booking System – BooklyThe Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the… | |
| CVE-2026-93477 | 25 Sep 2026 | CVSS 5.9 | ash-project ashImproperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a… | |
| CVE-2026-93897 | 25 Sep 2026 | CVSS 6.4 | paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings DirectoryThe GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | |
| CVE-2026-93899 | 25 Sep 2026 | CVSS 6.5 | wordplus Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat BotsThe Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to generic SQL Injection via… | |
| CVE-2026-94376 | 25 Sep 2026 | CVSS 6.4 | wordplus Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat BotsThe Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site… | |
| CVE-2026-96039 | 25 Sep 2026 | CVSS 7.2 | bookingalgorithms BA Book EverythingThe BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and… | |
| CVE-2026-84281 | 25 Sep 2026 | CVSS 7.2 | radykal Fancy Product DesignerThe Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta in all… | |
| CVE-2026-89055 | 25 Sep 2026 | CVSS 9.1 | ivole Customer Reviews for WooCommerceThe Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.120.0. This… | |
| CVE-2026-92212 | 25 Sep 2026 | CVSS 6.1 | jetmonsters JetFormBuilder — Dynamic Blocks Form BuilderThe JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'jfb_xss' (URL Query… | |
| CVE-2026-92746 | 25 Sep 2026 | CVSS 6.4 | jegstudio Gutenverse – WordPress Blocks, Page Builder & Site EditorThe Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Comment… | |
| CVE-2026-92799 | 25 Sep 2026 | CVSS 5.3 | ladela Online Scheduling and Appointment Booking System – BooklyThe Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Authorization Bypass via PHP Type Juggling in all… | |
| CVE-2026-92829 | 25 Sep 2026 | CVSS 4.3 | pr-gateway Blog2Social: Social Media Auto Post & SchedulerThe Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including… | |
| CVE-2026-93303 | 25 Sep 2026 | CVSS 7.2 | htplugins HT Contact Form – Drag & Drop Form Builder for WordPressThe HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via… | |
| CVE-2026-62062 | 25 Sep 2026 | CVSS 8.8 | Elementor Website BuilderCross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website… | |
| CVE-2026-75553 | 25 Sep 2026 | CVSS 2.4 | Tohoku Electric Power Company, Incorporated Tohoku Electric Power "Yorisou e Net" Android AppSmartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a… | |
| CVE-2026-78393 | 25 Sep 2026 | CVSS 6.1 | Unknown Link LibraryThe Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates… | |
| CVE-2026-78394 | 25 Sep 2026 | CVSS 4.1 | Unknown Link LibraryThe Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk… | |
| CVE-2026-78397 | 25 Sep 2026 | CVSS 4.0 | Unknown Link LibraryThe Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch… | |
| CVE-2026-83591 | 25 Sep 2026 | CVSS 7.2 | mohammed_kaludi AMP for WP – Accelerated Mobile PagesThe AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex… | |
| CVE-2026-84279 | 25 Sep 2026 | CVSS 7.2 | radykal Fancy Product DesignerThe Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'output_format' parameter in all versions up to… | |
| CVE-2026-14281 | 25 Sep 2026 | CVSS 9.8 | 101gen Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country CodeThe Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation… | |
| CVE-2026-19775 | 25 Sep 2026 | CVSS 4.3 | allterraindeveloper OpenStation: Desktop Windows, Dock & Virtual Desktops for WP AdminThe OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up… | |
| CVE-2026-97721 | 25 Sep 2026 | CVSS 2.7 | Sanluan PublicCMSA weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file… | |
| CVE-2026-97818 | 25 Sep 2026 | CVSS 8.6 | phpIPAMphpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php. | |
| CVE-2026-97737 | 25 Sep 2026 | CVSS 7.4 | muety WakapiIn Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover. | |
| CVE-2026-97764 | 25 Sep 2026 | CVSS 3.7 | allauth django-allauthdjango-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can… | |
| CVE-2026-97732 | 25 Sep 2026 | CVSS 5.1 | IRONMACE IronshieldIRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and… | |
| CVE-2026-97735 | 25 Sep 2026 | CVSS 8.0 | ITFlowITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP… | |
| CVE-2026-97736 | 25 Sep 2026 | CVSS 5.4 | tinyauthtinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression. | |
| CVE-2025-14814 | 25 Sep 2026 | CVSS 6.4 | wipeoutmedia CSS & JavaScript ToolboxThe CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cjtoolbox shortcode in all versions… | |
| CVE-2026-97650 | 25 Sep 2026 | CVSS 4.3 | ningzichun student-management-systemA vulnerability has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the… | |
| CVE-2026-97724 | 25 Sep 2026 | CVSS 4.3 | swmansion React Native ReanimatedA prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a… | |
| CVE-2026-97730 | 25 Sep 2026 | CVSS 8.5 | Netgate pfSense PlusIn Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget… | |
| CVE-2026-97731 | 25 Sep 2026 | CVSS 7.1 | MinIOMinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders list… | |
| CVE-2026-97648 | 25 Sep 2026 | CVSS 4.3 | ningzichun student-management-systemA vulnerability was detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function… | |
| CVE-2026-97649 | 25 Sep 2026 | CVSS 4.7 | ningzichun student-management-systemA flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is an… | |
| CVE-2026-97723 | 25 Sep 2026 | CVSS 5.4 | madpsy ka9q_ubersdrmadpsy ka9q_ubersdr before 0.1.58 has a stored cross-site scripting (XSS) vulnerability in the chat message rendering functionality. User-controlled… | |
| CVE-2026-95811 | 25 Sep 2026 | CVSS 6.5 | VulnerabilityLemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling… | |
| CVE-2026-97647 | 25 Sep 2026 | CVSS 5.3 | ningzichun student-management-systemA security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an… | |
| CVE-2026-97646 | 25 Sep 2026 | CVSS 7.3 | ningzichun student-management-systemA weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown… | |
| CVE-2026-53493 | 25 Sep 2026 | CVSS 6.9 | Containerd has image-pull DoS via crafted OCI index graph amplificationcontainerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very… | Fix |
| CVE-2026-85417 | 25 Sep 2026 | CVSS 6.4 | Brocade SANnavIncomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs… | |
| CVE-2026-92288 | 25 Sep 2026 | CVSS 9.1 | VulnerabilityLemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because… | |
| CVE-2026-92289 | 25 Sep 2026 | CVSS 9.1 | VulnerabilityLemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because… | |
| CVE-2026-84283 | 25 Sep 2026 | CVSS 6.8 | FluteCode Secure FolderSecure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application… | |
| CVE-2026-85082 | 25 Sep 2026 | CVSS 8.5 | Maple Media Root Browser ClassicRoot Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the… | |
| CVE-2026-97230 | 24 Sep 2026 | CVSS 9.8 | VulnerabilityIO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generate_certificate… | |
| CVE-2026-85491 | 24 Sep 2026 | CVSS 8.8 | VulnerabilityCatalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo… | |
| CVE-2026-87720 | 24 Sep 2026 | CVSS 7.6 | GerritIncorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache eviction logic (ProjectCacheImpl) in… | |
| CVE-2026-87721 | 24 Sep 2026 | CVSS 8.7 | GerritUncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerrit Code Review versions… | |
| CVE-2026-87722 | 24 Sep 2026 | CVSS 8.7 | GerritUncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectPredicate, RegexRefPredicate… | |
| CVE-2026-97636 | 24 Sep 2026 | CVSS 6.5 | Apache Software Foundation Apache Airflow HashiCorp providerApache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team… | |
| CVE-2026-93353 | 24 Sep 2026 | CVSS 3.1 | 9001 copypartycopyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and… | |
| CVE-2026-95699 | 24 Sep 2026 | CVSS 9.6 | MrSteam iSteamX applicationPrior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose… | |
| CVE-2026-97366 | 24 Sep 2026 | CVSS 6.3 | jhen0409 react-native-debuggerA security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file… | |
| CVE-2026-97368 | 24 Sep 2026 | CVSS 6.3 | chillzhuang SpringBladeA weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInfo of the file… | |
| CVE-2026-88386 | 24 Sep 2026 | CVSS 5.5 | Vulnerabilitylibsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can… | |
| CVE-2026-88387 | 24 Sep 2026 | CVSS 5.5 | VulnerabilityLibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd() when processing TIFF tag 0x00fe (NewSubfileType). A… | |
| CVE-2026-88388 | 24 Sep 2026 | CVSS 7.5 | VulnerabilityEspruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit… | |
| CVE-2026-87118 | 24 Sep 2026 | CVSS 5.7 | Botslab G980HThe Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated… | |
| CVE-2026-84403 | 24 Sep 2026 | CVSS 6.2 | Botslab G980HThe Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy… | |
| CVE-2026-82585 | 24 Sep 2026 | CVSS 6.5 | Botslab G980HThe Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of… | |
| CVE-2026-82708 | 24 Sep 2026 | CVSS 6.5 | Botslab G980HThe Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi… | |
| CVE-2026-82716 | 24 Sep 2026 | CVSS 4.6 | Botslab G980HThe Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during… | |
| CVE-2026-81630 | 24 Sep 2026 | CVSS 8.1 | Botslab G980HThe Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through… | |
| CVE-2026-79959 | 24 Sep 2026 | CVSS 6.8 | Botslab G980HThe Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the… | |
| CVE-2026-75558 | 24 Sep 2026 | CVSS 5.3 | Botslab G980HThe Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the… | |
| CVE-2026-14443 | 24 Sep 2026 | CVSS 8.4 | Brocade SANnavIncomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to… | |
| CVE-2026-14442 | 24 Sep 2026 | CVSS 6.9 | Brocade SANnavAn information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in… | |
| CVE-2026-14441 | 24 Sep 2026 | CVSS 6.9 | Brocade SANnavA logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account… | |
| CVE-2026-97365 | 24 Sep 2026 | CVSS 6.3 | chonkie-inc littrsA vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs… | |
| CVE-2026-96883 | 24 Sep 2026 | CVSS 8.8 | AWS pgcollectionpgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated… |
Page 157 of 168