[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112785 | 20 Oct 2026 | CVSS 4.3 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users to create, rename, delete, and populate saved… | |
| CVE-2026-112786 | 20 Oct 2026 | CVSS 5.4 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to… | |
| CVE-2026-112787 | 20 Oct 2026 | CVSS 4.3 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenticated users to view EEO… | |
| CVE-2026-108089 | 20 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache Cocoon** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An… | |
| CVE-2026-108062 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse CSI - PIAPre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole… | |
| CVE-2026-108086 | 20 Oct 2026 | Not scored yet | Apache Software Foundation Apache Cocoon** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon… | |
| CVE-2026-108087 | 20 Oct 2026 | Not scored yet | Apache Software Foundation Apache Cocoon** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Cocoon… | |
| CVE-2026-108088 | 20 Oct 2026 | Not scored yet | Apache Software Foundation Apache Cocoon** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user… | |
| CVE-2026-107597 | 20 Oct 2026 | CVSS 5.1 | Eclipse Foundation Eclipse CSI - PIAPIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and then follows the… | |
| CVE-2026-85267 | 20 Oct 2026 | CVSS 8.7 | Google Cloud Cloud ShellA Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to… | |
| CVE-2026-43851 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. | |
| CVE-2026-43852 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. | |
| CVE-2026-43853 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. | |
| CVE-2026-43854 | 20 Oct 2026 | CVSS 6.3 | Advantech ADAM-3600A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices. | |
| CVE-2026-43855 | 20 Oct 2026 | CVSS 7.5 | Advantech ADAM-3600A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. | |
| CVE-2026-43856 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary… | |
| CVE-2026-43857 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. | |
| CVE-2026-43858 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. | |
| CVE-2026-113378 | 20 Oct 2026 | CVSS 5.3 | mcollina mcp-ripgrepA security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component… | |
| CVE-2026-113381 | 20 Oct 2026 | CVSS 7.3 | OsclassA weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file… | |
| CVE-2026-113442 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "TYPO3 Fluid-Form by coding.ms"Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML… | |
| CVE-2026-113459 | 20 Oct 2026 | CVSS 7.1 | TYPO3 Extension "TYPO3 AI Integration Extension"In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the… | |
| CVE-2026-113468 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "TYPO3 Shop by coding.ms"The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can… | |
| CVE-2026-43849 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. | |
| CVE-2026-43850 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. | |
| CVE-2026-112068 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "Analytics"The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the… | |
| CVE-2026-112069 | 20 Oct 2026 | CVSS 6.3 | TYPO3 Extension "FAL Protect"The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served… | |
| CVE-2026-112070 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "Analytics"The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can… | |
| CVE-2026-112071 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "TYPO3 Shop by coding.ms"The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any… | |
| CVE-2026-112237 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "Kitodo.Presentation"The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply… | |
| CVE-2026-112238 | 20 Oct 2026 | CVSS 8.7 | TYPO3 Extension "File manager"The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the… | |
| CVE-2026-112239 | 20 Oct 2026 | CVSS 7.2 | TYPO3 Extension "TYPO3 AI Integration Extension"The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the… | |
| CVE-2026-112240 | 20 Oct 2026 | CVSS 6.3 | TYPO3 Extension "TYPO3 Fluid-Form by coding.ms"The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in… | |
| CVE-2026-112064 | 20 Oct 2026 | CVSS 7.1 | TYPO3 Extension "sgalinski Cookie Consent"The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query… | |
| CVE-2026-112065 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "sgalinski Cookie Consent"The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page… | |
| CVE-2026-112066 | 20 Oct 2026 | CVSS 7.1 | TYPO3 Extension "sgalinski Cookie Consent"The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module… | |
| CVE-2026-112067 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "Accessible Form Captcha"The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image can read… | |
| CVE-2026-111844 | 20 Oct 2026 | CVSS 6.5 | BrizyImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.This issue… | |
| CVE-2026-92287 | 20 Oct 2026 | Not scored yet | Apache Software Foundation Apache Arrow C++Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet… | |
| CVE-2026-43846 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution. | |
| CVE-2026-43847 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the… | |
| CVE-2026-43848 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. | |
| CVE-2026-43837 | 20 Oct 2026 | CVSS 7.5 | Advantech ADAM-3600A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code… | |
| CVE-2026-43838 | 20 Oct 2026 | CVSS 9.2 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. | |
| CVE-2026-43839 | 20 Oct 2026 | CVSS 8.7 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service. | |
| CVE-2026-43840 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the… | |
| CVE-2026-43841 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the… | |
| CVE-2026-43842 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the… | |
| CVE-2026-43843 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. | |
| CVE-2026-43844 | 20 Oct 2026 | CVSS 9.3 | Advantech ADAM-3600A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. | |
| CVE-2026-43845 | 20 Oct 2026 | CVSS 9.2 | Advantech ADAM-3600A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. | |
| CVE-2026-113465 | 20 Oct 2026 | CVSS 6.6 | Stormshield Network SecurityIt is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an… | |
| CVE-2026-113469 | 20 Oct 2026 | CVSS 7.5 | Stormshield Network SecurityA failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in… | |
| CVE-2026-11959 | 20 Oct 2026 | CVSS 6.9 | FacturaScriptsStored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of user input in the… | |
| CVE-2026-11960 | 20 Oct 2026 | CVSS 6.9 | FacturaScriptsEnumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a… | |
| CVE-2026-43836 | 20 Oct 2026 | CVSS 9.3 | Advantech ADAM-3600A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. | |
| CVE-2026-101201 | 20 Oct 2026 | CVSS 4.3 | qtA malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read. | |
| CVE-2026-43834 | 20 Oct 2026 | CVSS 7.5 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution. | |
| CVE-2026-43835 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially… | |
| CVE-2026-113406 | 20 Oct 2026 | CVSS 8.8 | YS-infoware BA-WorkflowBA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read… | |
| CVE-2026-113407 | 20 Oct 2026 | CVSS 8.8 | YS-infoware BA-WorkflowBA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read… | |
| CVE-2026-111090 | 20 Oct 2026 | CVSS 7.8 | Stormshield Network SecurityA logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use… | Fix |
| CVE-2026-112177 | 20 Oct 2026 | CVSS 7.3 | Red Hat Enterprise Linux 10A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from… | |
| CVE-2026-113405 | 20 Oct 2026 | CVSS 8.8 | YS-infoware BA-WorkflowBA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read… | |
| CVE-2024-2323 | 20 Oct 2026 | CVSS 4.8 | WSO2 Enterprise IntegratorThe RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled… | |
| CVE-2026-112148 | 20 Oct 2026 | CVSS 5.1 | LY Corporation LIFF SDKA vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker… | |
| CVE-2026-113402 | 20 Oct 2026 | CVSS 6.5 | ArmorX Global Technology ArmorX SpamArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal… | |
| CVE-2026-113403 | 20 Oct 2026 | CVSS 6.5 | ArmorX Global Technology ArmorX SpamArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands… | |
| CVE-2026-113404 | 20 Oct 2026 | CVSS 8.8 | Uniong WebITRWebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to… | |
| CVE-2026-93878 | 20 Oct 2026 | CVSS 6.4 | DiviGear CarouselThe DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to, and… | |
| CVE-2026-110095 | 20 Oct 2026 | CVSS 3.7 | fast-urifast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0… | |
| CVE-2026-110180 | 20 Oct 2026 | CVSS 4.8 | fast-urifast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and… | |
| CVE-2026-110306 | 20 Oct 2026 | CVSS 6.1 | fast-urifast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0… | |
| CVE-2026-110725 | 20 Oct 2026 | CVSS 3.7 | fast-urifast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0… | |
| CVE-2026-96902 | 20 Oct 2026 | CVSS 5.3 | Unknown Easy Property ListingsThe Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing… | |
| CVE-2026-96903 | 20 Oct 2026 | CVSS 4.3 | Unknown Easy Property ListingsThe Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contact-management read AJAX… | |
| CVE-2026-97627 | 20 Oct 2026 | CVSS 8.6 | Atsumi Electric Co., Ltd. ADX5004Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the… | |
| CVE-2026-93300 | 20 Oct 2026 | CVSS 7.5 | EventON - SubscriberThe EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including… | |
| CVE-2026-100737 | 20 Oct 2026 | CVSS 6.9 | Atsumi Electric Co., Ltd. ADX5004Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the… | |
| CVE-2026-113380 | 20 Oct 2026 | CVSS 9.3 | Signal RingRTCIn the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear… | |
| CVE-2026-113386 | 20 Oct 2026 | CVSS 7.1 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via… | |
| CVE-2026-109831 | 20 Oct 2026 | CVSS 5.1 | GNU Project UnRTFUnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service… | |
| CVE-2026-86467 | 20 Oct 2026 | Not scored yet | Apache Software Foundation Apache Airflow Amazon providerApache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The… | |
| CVE-2026-12489 | 20 Oct 2026 | CVSS 6.5 | Zyxel EX3501-T0 firmwareAn incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an… | |
| CVE-2026-17518 | 20 Oct 2026 | CVSS 8.2 | ASUS RouterBuffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause… | |
| CVE-2026-75753 | 20 Oct 2026 | CVSS 5.3 | ASUS RouterMissing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP… | |
| CVE-2026-102438 | 20 Oct 2026 | CVSS 8.5 | ASUS Armoury CrateAn uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via… | |
| CVE-2026-105299 | 20 Oct 2026 | CVSS 8.7 | Cloudflare https://github.com/cloudflare/pingoraSummary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to… | |
| CVE-2026-86963 | 20 Oct 2026 | CVSS 5.9 | Apple iOS and iPadOSA denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An… | |
| CVE-2026-86975 | 20 Oct 2026 | CVSS 4.3 | Apple iOS and iPadOSAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27… | |
| CVE-2026-86976 | 20 Oct 2026 | CVSS 5.5 | Apple iOS and iPadOSAn authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be… | |
| CVE-2026-86977 | 20 Oct 2026 | Not scored yet | Apple iOS and iPadOSAn authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate… | |
| CVE-2026-86979 | 20 Oct 2026 | CVSS 5.5 | Apple macOSA privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. | |
| CVE-2026-86981 | 20 Oct 2026 | CVSS 5.5 | Apple macOSAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be… | |
| CVE-2026-86940 | 20 Oct 2026 | CVSS 5.5 | Apple macOSThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory. | |
| CVE-2026-86944 | 20 Oct 2026 | Not scored yet | Apple iOS and iPadOSAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS… | |
| CVE-2026-86948 | 20 Oct 2026 | Not scored yet | Apple XcodeThis issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out… | |
| CVE-2026-86949 | 20 Oct 2026 | CVSS 8.8 | Apple XcodeThis issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to… | |
| CVE-2026-86953 | 20 Oct 2026 | CVSS 4.6 | Apple iOS and iPadOSAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27… | |
| CVE-2026-86955 | 20 Oct 2026 | CVSS 5.5 | Apple iOS and iPadOSAn authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access… |
Page 29 of 168