[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-91816 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded… | |
| CVE-2026-91800 | 23 Sep 2026 | CVSS 8.8 | Foxit Software Inc. Foxit PDF EditorA local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable… | |
| CVE-2026-91801 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths… | |
| CVE-2026-91802 | 23 Sep 2026 | CVSS 5.5 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and… | |
| CVE-2026-91803 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a… | |
| CVE-2026-91804 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance… | |
| CVE-2026-91805 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes… | |
| CVE-2026-91806 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references… | |
| CVE-2026-91807 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation… | |
| CVE-2026-91808 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression… | |
| CVE-2026-91792 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and… | |
| CVE-2026-91793 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font… | |
| CVE-2026-91794 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorAn out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary… | |
| CVE-2026-91795 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorFoxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an… | |
| CVE-2026-91796 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorThe interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger… | |
| CVE-2026-91797 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorFoxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to… | |
| CVE-2026-91798 | 23 Sep 2026 | CVSS 8.8 | Foxit Software Inc. Foxit PDF EditorA local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that… | |
| CVE-2026-91799 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the… | |
| CVE-2026-50228 | 23 Sep 2026 | CVSS 6.1 | Acer NitroSense V5An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including… | |
| CVE-2026-91788 | 23 Sep 2026 | CVSS 4.7 | Foxit Software Inc. Foxit PDF EditorWhen implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification… | |
| CVE-2026-91789 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorFoxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under… | |
| CVE-2026-91790 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed… | |
| CVE-2026-91791 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by… | |
| CVE-2026-50227 | 23 Sep 2026 | CVSS 6.1 | Acer NitroSense V5An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to… | |
| CVE-2026-82331 | 23 Sep 2026 | CVSS 9.8 | Apache Software Foundation Apache BuildStreamImproper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python <… | |
| CVE-2026-5924 | 23 Sep 2026 | CVSS 6.4 | jetmonsters Getwid – Gutenberg BlocksThe Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute… | |
| CVE-2026-6831 | 23 Sep 2026 | CVSS 6.5 | vsourz1td Advanced Contact form 7 DBThe Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This is due… | |
| CVE-2026-93510 | 23 Sep 2026 | CVSS 4.3 | Unknown Points and Rewards for WooCommerceThe Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win… | |
| CVE-2026-93511 | 23 Sep 2026 | CVSS 5.3 | Unknown Premium PackagesThe Premium Packages WordPress plugin before 7.2.1 does not verify PayPal's webhook signature before processing payment and subscription… | |
| CVE-2026-93528 | 23 Sep 2026 | CVSS 3.7 | Unknown NP Quote Request for WooCommerceThe NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing… | |
| CVE-2026-89331 | 23 Sep 2026 | CVSS 5.3 | Unknown FluentBoardsThe FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature… | |
| CVE-2026-90951 | 23 Sep 2026 | CVSS 3.7 | Unknown Paid Membership SubscriptionsThe Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user… | |
| CVE-2026-90985 | 23 Sep 2026 | CVSS 5.3 | Unknown WPC Smart Compare for WooCommerceThe WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product… | |
| CVE-2026-91024 | 23 Sep 2026 | CVSS 6.8 | Unknown Booking ManagerThe Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iCalendar feed before using them… | |
| CVE-2026-91025 | 23 Sep 2026 | CVSS 4.3 | Unknown Booking ManagerThe Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager WordPress plugin before… | |
| CVE-2026-91073 | 23 Sep 2026 | CVSS 6.8 | Unknown Subscribe FormsThe Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing… | |
| CVE-2026-91077 | 23 Sep 2026 | CVSS 2.7 | Unknown Event Booking Manager for WooCommerceThe Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to events the requesting user is… | |
| CVE-2026-93507 | 23 Sep 2026 | CVSS 3.3 | Unknown WC Fields FactoryThe WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing… | |
| CVE-2026-93508 | 23 Sep 2026 | CVSS 8.1 | Unknown WC Fields FactoryThe WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated… | |
| CVE-2026-86608 | 23 Sep 2026 | CVSS 8.2 | Unknown WP Recipe MakerThe WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor does it bound what that route… | |
| CVE-2026-86783 | 23 Sep 2026 | CVSS 5.3 | Unknown Post Grid Gutenberg BlocksThe Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization or post-visibility check on a REST API route that… | |
| CVE-2026-86785 | 23 Sep 2026 | CVSS 5.3 | Unknown Social Commerce for WooCommerceThe Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing… | |
| CVE-2026-86842 | 23 Sep 2026 | CVSS 6.8 | Unknown Real3D FlipbookThe Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions… | |
| CVE-2026-87069 | 23 Sep 2026 | CVSS 3.1 | Unknown Forminator FormsThe Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before running a one-time payment-field… | |
| CVE-2026-87074 | 23 Sep 2026 | CVSS 3.7 | Unknown Forminator FormsThe Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and takes both… | |
| CVE-2026-87979 | 23 Sep 2026 | CVSS 5.3 | Unknown Paymob for WooCommerceThe Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch of its payment webhook… | |
| CVE-2026-87981 | 23 Sep 2026 | CVSS 4.7 | Unknown Paymob for WooCommerceThe Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its… | |
| CVE-2026-88929 | 23 Sep 2026 | CVSS 5.3 | Unknown Product Badge, Label, Countdown Timer for WooCommerceThe Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before… | |
| CVE-2026-88997 | 23 Sep 2026 | CVSS 6.8 | Unknown JSM Show Post MetadataThe JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler… | |
| CVE-2026-84098 | 23 Sep 2026 | CVSS 6.5 | Unknown Directorist: AI-Powered Business Directory, Listings & Classified AdsThe Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's… | |
| CVE-2026-84150 | 23 Sep 2026 | CVSS 5.4 | Unknown Directorist: AI-Powered Business Directory, Listings & Classified AdsThe Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a… | |
| CVE-2026-84168 | 23 Sep 2026 | CVSS 5.3 | Unknown Easy Hide LoginThe Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the… | |
| CVE-2026-84741 | 23 Sep 2026 | CVSS 5.3 | Unknown The Events CalendarThe Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records before embedding their stored details into a… | |
| CVE-2026-84742 | 23 Sep 2026 | CVSS 2.7 | Unknown The Events CalendarThe Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through… | |
| CVE-2026-84743 | 23 Sep 2026 | CVSS 3.8 | Unknown The Events CalendarThe Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes, allowing… | |
| CVE-2026-85006 | 23 Sep 2026 | CVSS 6.8 | Unknown HappyAddons for ElementorThe HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets before outputting it inside… | |
| CVE-2026-86602 | 23 Sep 2026 | CVSS 4.3 | Unknown WP Recipe MakerThe WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, allowing any authenticated user… | |
| CVE-2026-86603 | 23 Sep 2026 | CVSS 4.3 | Unknown WP Recipe MakerThe WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its AJAX actions, allowing any authenticated user… | |
| CVE-2026-80342 | 23 Sep 2026 | CVSS 6.5 | Unknown Payment Plugins for PayPal WooCommerceThe Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.27 does not verify that a PayPal order supplied in a payment request belongs… | |
| CVE-2026-81338 | 23 Sep 2026 | CVSS 4.6 | Unknown MasterStudy LMS WordPress PluginThe MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before… | |
| CVE-2026-81339 | 23 Sep 2026 | CVSS 4.3 | Unknown MasterStudy LMS WordPress PluginThe MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt… | |
| CVE-2026-82843 | 23 Sep 2026 | CVSS 9.0 | Unknown WP OAuth Server ( Login with WordPress )The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the… | |
| CVE-2026-83555 | 23 Sep 2026 | CVSS 5.3 | Unknown Email Subscribers & NewslettersThe Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's… | |
| CVE-2026-84026 | 23 Sep 2026 | CVSS 5.3 | Unknown Directorist: AI-Powered Business Directory, Listings & Classified AdsThe Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint… | |
| CVE-2026-84027 | 23 Sep 2026 | CVSS 4.3 | Unknown Directorist: AI-Powered Business Directory, Listings & Classified AdsThe Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check user capabilities when… | |
| CVE-2026-84046 | 23 Sep 2026 | CVSS 5.0 | Unknown Directorist: AI-Powered Business Directory, Listings & Classified AdsThe Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validate a user-supplied URL before… | |
| CVE-2026-18364 | 23 Sep 2026 | CVSS 4.3 | Unknown zportalsThe zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a… | |
| CVE-2026-18365 | 23 Sep 2026 | CVSS 4.3 | Unknown zportalsThe zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a… | |
| CVE-2026-19438 | 23 Sep 2026 | CVSS 7.5 | ABB Mint Workbench IImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I. This issue affects Mint… | |
| CVE-2026-75799 | 23 Sep 2026 | CVSS 9.0 | Unknown YAHMAN Add-onsThe YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory… | |
| CVE-2026-77765 | 23 Sep 2026 | CVSS 5.3 | Unknown Better PaymentThe Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed… | |
| CVE-2026-77766 | 23 Sep 2026 | CVSS 4.3 | Unknown Directorist: AI-Powered Business Directory, Listings & Classified AdsThe Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not scope one of its REST collection… | |
| CVE-2025-15696 | 23 Sep 2026 | CVSS 6.8 | Unknown Real3D FlipbookThe Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin… | |
| CVE-2026-14321 | 23 Sep 2026 | CVSS 8.2 | Unknown divi-dashThe divi-dash WordPress plugin before 1.0.7 does not validate the source of the client IP address it uses for rate limiting and banning, allowing… | |
| CVE-2026-16264 | 23 Sep 2026 | CVSS 6.5 | Unknown NewslettersThe Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber management actions, and issues a… | |
| CVE-2022-4997 | 23 Sep 2026 | CVSS 8.6 | Unknown jet-form-builder-stripe-gatewayThe jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement… | |
| CVE-2026-96258 | 23 Sep 2026 | CVSS 4.3 | onSite internet GmbH Auktion NG AuktionssoftwareA vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file… | |
| CVE-2026-96257 | 23 Sep 2026 | CVSS 10.0 | Fast FAC1203R Gigabit EditionA flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device… | |
| CVE-2026-95929 | 23 Sep 2026 | CVSS 6.3 | iFlytek astron-agentA weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file… | |
| CVE-2026-95930 | 23 Sep 2026 | CVSS 6.3 | iFlytek astron-agentA security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl… | |
| CVE-2026-95957 | 23 Sep 2026 | CVSS 4.3 | SourceCodester Smart Attendance System with QR Code ScannerA vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file… | |
| CVE-2026-95958 | 23 Sep 2026 | CVSS 3.3 | JusticeRage ManalyzeA security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the… | |
| CVE-2026-89425 | 23 Sep 2026 | CVSS 7.5 | jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java… | Fix |
| CVE-2026-91776 | 23 Sep 2026 | CVSS 7.5 | jackson-databind retains every unknown raw type IDTypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID… | Fix |
| CVE-2026-91777 | 23 Sep 2026 | CVSS 7.5 | jackson-databind quadratic forward-reference completionForward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference… | Fix |
| CVE-2026-95927 | 23 Sep 2026 | CVSS 7.3 | SourceCodester Online Reviewer Management SystemA vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file… | |
| CVE-2026-95928 | 23 Sep 2026 | CVSS 5.5 | recommenders-team recommendersA security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file… | |
| CVE-2026-95926 | 23 Sep 2026 | CVSS 7.3 | SourceCodester Online Reviewer Management SystemA vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file… | |
| CVE-2026-95924 | 23 Sep 2026 | CVSS 7.3 | SourceCodester Online Reviewer Management SystemA vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file… | |
| CVE-2026-95925 | 23 Sep 2026 | CVSS 7.3 | SourceCodester Online Reviewer Management SystemA vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file… | |
| CVE-2026-96271 | 23 Sep 2026 | CVSS 7.1 | photoviewPhotoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create… | |
| CVE-2026-96272 | 23 Sep 2026 | CVSS 7.5 | MacWarrior clipbucket-v5ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed… | |
| CVE-2026-96273 | 23 Sep 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that… | |
| CVE-2026-95897 | 23 Sep 2026 | CVSS 5.5 | DaskA security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the… | |
| CVE-2026-92930 | 23 Sep 2026 | CVSS 6.2 | OpenEye Apex Network Video Recorder (NVR)OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret… | |
| CVE-2026-94367 | 23 Sep 2026 | CVSS 7.2 | OpenEye Apex Network Video Recorder (NVR)OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated… | |
| CVE-2026-95829 | 23 Sep 2026 | CVSS 6.3 | TDuckCloud tduck-platformA vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function… | |
| CVE-2026-95830 | 23 Sep 2026 | CVSS 6.3 | theRealSain PixtreamA security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown… | |
| CVE-2026-95833 | 23 Sep 2026 | CVSS 6.3 | itsourcecode Leave Management SystemA weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php… | |
| CVE-2026-95868 | 23 Sep 2026 | CVSS 6.3 | AdithyaYelloju Restaurant-Management-SystemA weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue… |
Page 167 of 168