[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-9817 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)… | |
| CVE-2026-92386 | 20 Oct 2026 | Not scored yet | curlWhen writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length… | |
| CVE-2026-92387 | 20 Oct 2026 | Not scored yet | curlBy permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its… | |
| CVE-2026-92388 | 20 Oct 2026 | Not scored yet | curlWhen an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the… | |
| CVE-2026-92389 | 20 Oct 2026 | Not scored yet | curllibcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for… | |
| CVE-2026-92390 | 20 Oct 2026 | Not scored yet | curlWhen invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints… | |
| CVE-2026-92391 | 20 Oct 2026 | Not scored yet | curlA deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An… | |
| CVE-2026-86415 | 20 Oct 2026 | Not scored yet | curllibcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel… | |
| CVE-2026-87861 | 20 Oct 2026 | Not scored yet | curlWhen using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via… | |
| CVE-2026-87862 | 20 Oct 2026 | Not scored yet | curlImporting a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires… | |
| CVE-2026-87863 | 20 Oct 2026 | Not scored yet | curlAn authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit… | |
| CVE-2026-87864 | 20 Oct 2026 | Not scored yet | curlEnabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmitting line-ending expanded… | |
| CVE-2026-87865 | 20 Oct 2026 | Not scored yet | curlWhen libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a… | |
| CVE-2026-87866 | 20 Oct 2026 | Not scored yet | curlWhen built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS… | |
| CVE-2026-42020 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R… | |
| CVE-2026-42021 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42022 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42023 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42024 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42025 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)… | |
| CVE-2026-42026 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)… | |
| CVE-2026-86414 | 20 Oct 2026 | Not scored yet | curlAn HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by… | |
| CVE-2026-28763 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s)… | |
| CVE-2026-33568 | 20 Oct 2026 | CVSS 9.1 | TotolinkA OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s)… | |
| CVE-2026-35499 | 20 Oct 2026 | CVSS 9.1 | TotolinkAn os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327… | |
| CVE-2026-40615 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s)… | |
| CVE-2026-40627 | 20 Oct 2026 | CVSS 9.1 | TotolinkAn os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R… | |
| CVE-2026-41222 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s)… | |
| CVE-2026-41223 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s)… | |
| CVE-2026-42019 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R… | |
| CVE-2026-111758 | 20 Oct 2026 | CVSS 7.5 | markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or… | Fix |
| CVE-2026-112407 | 20 Oct 2026 | CVSS 8.8 | AWS CICD-toolchain-for-serverless-applicationsIncorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated… | |
| CVE-2026-112712 | 20 Oct 2026 | CVSS 9.1 | @fastify/middie@fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() function joined a path-scoped… | |
| CVE-2026-10133 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10135 | 20 Oct 2026 | CVSS 9.1 | TotolinkA OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10136 | 20 Oct 2026 | CVSS 9.1 | TotolinkA heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)… | |
| CVE-2026-10137 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)… | |
| CVE-2026-10138 | 20 Oct 2026 | CVSS 9.1 | TotolinkA OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10139 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10141 | 20 Oct 2026 | CVSS 9.1 | TotolinkA Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-110322 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupThe PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during… | |
| CVE-2026-105960 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupPEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count… | |
| CVE-2026-107928 | 20 Oct 2026 | Not scored yet | curlWhen curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read… | |
| CVE-2026-107929 | 20 Oct 2026 | Not scored yet | curlWhen `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`)… | |
| CVE-2026-109576 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupThe parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes… | |
| CVE-2026-10131 | 20 Oct 2026 | CVSS 9.1 | TotolinkAn OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s)… | |
| CVE-2026-10132 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s)… | |
| CVE-2016-20103 | 20 Oct 2026 | CVSS 7.5 | Cherry Team Cherry PluginCherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files… | |
| CVE-2016-20104 | 20 Oct 2026 | CVSS 7.5 | EyeLock nano NXTEyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read… | |
| CVE-2026-101103 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupThe PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record. | |
| CVE-2026-103672 | 20 Oct 2026 | CVSS 7.1 | HMS Networks PEAK-System Device Driver SetupThe PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from… | |
| CVE-2015-20124 | 20 Oct 2026 | CVSS 7.5 | Aspose Importer & ExporterAspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download… | |
| CVE-2015-20125 | 20 Oct 2026 | CVSS 7.5 | Aspose PDF ExporterAspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files… | |
| CVE-2015-20128 | 20 Oct 2026 | CVSS 8.2 | FooSun DotNetCMSFooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the… | |
| CVE-2016-20100 | 20 Oct 2026 | CVSS 7.5 | Ian Howatson Memphis Documents LibraryMemphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read… | |
| CVE-2016-20101 | 20 Oct 2026 | CVSS 8.1 | Pedro Marcelo Issuu PanelIssuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or… | |
| CVE-2016-20102 | 20 Oct 2026 | CVSS 6.1 | JavaMelodyJavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying… | |
| CVE-2012-20005 | 20 Oct 2026 | CVSS 6.1 | Łukasz Więcek SocialFitSocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject… | |
| CVE-2014-125131 | 20 Oct 2026 | CVSS 6.1 | DedeCMSDedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying… | |
| CVE-2014-125132 | 20 Oct 2026 | CVSS 6.1 | Jason Newman Blogroll FunBlogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to… | |
| CVE-2014-125133 | 20 Oct 2026 | CVSS 7.5 | imithemes NativeChurchNativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary… | |
| CVE-2014-125134 | 20 Oct 2026 | CVSS 7.5 | ChurcHopeChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files… | |
| CVE-2015-20123 | 20 Oct 2026 | CVSS 7.5 | Aspose Doc ExporterAspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download… | |
| CVE-2012-20003 | 20 Oct 2026 | CVSS 6.1 | Web Updates KMU Custom TablesCustom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to… | |
| CVE-2012-20004 | 20 Oct 2026 | CVSS 6.1 | Carles Reverter K-newsK-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject… | |
| CVE-2012-20002 | 20 Oct 2026 | CVSS 7.5 | James Charlesworth TinyMCE Thumbnail GalleryTinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read… | |
| CVE-2026-86409 | 20 Oct 2026 | Not scored yet | curlSetting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentation. A subsequent transfer on… | |
| CVE-2026-86410 | 20 Oct 2026 | Not scored yet | curlA flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as… | |
| CVE-2026-86411 | 20 Oct 2026 | Not scored yet | curlAn `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy handle upgraded with `STARTTLS`… | |
| CVE-2026-86412 | 20 Oct 2026 | Not scored yet | curlA remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same… | |
| CVE-2026-86413 | 20 Oct 2026 | Not scored yet | curlWhen using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential… | |
| CVE-2026-113724 | 20 Oct 2026 | CVSS 4.5 | virtualenv: Deletion recovery can change a symlink target's modevirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion error handler responds to a… | Fix |
| CVE-2026-113725 | 20 Oct 2026 | CVSS 7.8 | virtualenv bash activate runs commands from an environment name with a backslash before $virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for… | Fix |
| CVE-2026-113866 | 20 Oct 2026 | CVSS 5.9 | Mozilla ThunderbirdWhen setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug… | Fix |
| CVE-2026-113867 | 20 Oct 2026 | Not scored yet | Mozilla ThunderbirdThunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in… | Fix |
| CVE-2026-113868 | 20 Oct 2026 | CVSS 5.3 | Mozilla ThunderbirdWhen authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious… | Fix |
| CVE-2026-113869 | 20 Oct 2026 | CVSS 5.4 | Mozilla ThunderbirdWhen Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the… | Fix |
| CVE-2026-113717 | 20 Oct 2026 | CVSS 2.3 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd() handles --seeder pip… | |
| CVE-2026-113718 | 20 Oct 2026 | CVSS 7.1 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write… | |
| CVE-2026-113719 | 20 Oct 2026 | CVSS 4.5 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall._uninstall_previous_version() accepts existing… | |
| CVE-2026-113720 | 20 Oct 2026 | CVSS 4.4 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to copy cached… | |
| CVE-2026-113721 | 20 Oct 2026 | CVSS 4.5 | virtualenv: Generated files can follow existing destination linksvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existing output… | Fix |
| CVE-2026-113722 | 20 Oct 2026 | CVSS 7.8 | virtualenv: Generated POSIX console launchers interpret destination paths as shell syntaxvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely… | Fix |
| CVE-2026-113723 | 20 Oct 2026 | CVSS 7.1 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in… | |
| CVE-2026-113715 | 20 Oct 2026 | CVSS 2.0 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with… | |
| CVE-2026-113716 | 20 Oct 2026 | CVSS 4.5 | virtualenv: Builtin creation follows linked environment directoriesvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensure_dir() for executable… | Fix |
| CVE-2026-112380 | 20 Oct 2026 | CVSS 9.9 | Amazon Kiro CrewMissing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group… | |
| CVE-2026-107692 | 20 Oct 2026 | CVSS 4.8 | Gaijin Entertainment War ThunderThe War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only… | |
| CVE-2026-97406 | 20 Oct 2026 | Not scored yet | Xerj Console APIXERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing… | |
| CVE-2026-113714 | 20 Oct 2026 | CVSS 2.3 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-index downloads directly… | |
| CVE-2026-113808 | 20 Oct 2026 | CVSS 7.1 | Stormshield Network SecurityA Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when… | |
| CVE-2026-113810 | 20 Oct 2026 | CVSS 7.0 | Stormshield Network SecurityA Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when… | |
| CVE-2026-113708 | 20 Oct 2026 | CVSS 9.9 | argoproj argo-cdArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref… | |
| CVE-2026-113709 | 20 Oct 2026 | CVSS 9.9 | argoproj argo-cdArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has… | |
| CVE-2026-113712 | 20 Oct 2026 | CVSS 4.8 | Cachet has Stored XSS in Incident ComponentCachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident… | |
| CVE-2026-113713 | 20 Oct 2026 | CVSS 4.4 | pypa virtualenvvirtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment… | |
| CVE-2026-113643 | 20 Oct 2026 | CVSS 4.3 | EspoCRMA vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file… | |
| CVE-2026-111088 | 20 Oct 2026 | CVSS 6.5 | Stormshield Network SecurityA Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. | |
| CVE-2026-111767 | 20 Oct 2026 | CVSS 8.6 | MCP TypeScript SDK: Experimental tasks were not tied to the session that created themMCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the… | Fix |
| CVE-2026-100132 | 20 Oct 2026 | CVSS 4.3 | Adobe Acrobat for EdgeAcrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… |
Page 26 of 168