[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102893 | 14 Oct 2026 | CVSS 9.1 | zulipZulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches the identity provider… | |
| CVE-2026-100169 | 14 Oct 2026 | CVSS 7.6 | ProwlerImproper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated… | |
| CVE-2026-100394 | 14 Oct 2026 | CVSS 6.5 | Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenantNezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in… | Fix |
| CVE-2026-100404 | 14 Oct 2026 | CVSS 6.5 | zulipZulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message events for public… | |
| CVE-2026-96615 | 14 Oct 2026 | CVSS 6.5 | F5 NGINX Gateway FabricDescription NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated… | |
| CVE-2026-97205 | 14 Oct 2026 | CVSS 8.1 | F5 NGINX PlusNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain… | Fix |
| CVE-2026-97629 | 14 Oct 2026 | CVSS 6.5 | F5 NGINX PlusDescription When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key… | Fix |
| CVE-2026-95101 | 14 Oct 2026 | CVSS 5.3 | F5 NGINX PlusDescription NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on… | Fix |
| CVE-2026-84471 | 14 Oct 2026 | CVSS 7.2 | OpenVPNThe fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated… | |
| CVE-2026-91184 | 14 Oct 2026 | CVSS 8.8 | F5 NGINX Gateway FabricDescription NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced… | |
| CVE-2026-93479 | 14 Oct 2026 | CVSS 8.1 | F5 NGINX PlusA vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format… | Fix |
| CVE-2026-94197 | 14 Oct 2026 | CVSS 7.5 | F5 NGINX Ingress ControllerAn authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the… | |
| CVE-2026-78231 | 14 Oct 2026 | CVSS 5.3 | GiteaWhen OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID… | |
| CVE-2026-78433 | 14 Oct 2026 | CVSS 5.9 | GiteaGitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions… | |
| CVE-2026-73800 | 14 Oct 2026 | CVSS 8.8 | GiteaGitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event. A… | |
| CVE-2026-73802 | 14 Oct 2026 | CVSS 8.8 | gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabledGitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace… | Fix |
| CVE-2026-73804 | 14 Oct 2026 | CVSS 8.1 | GiteaGitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with… | |
| CVE-2026-73814 | 14 Oct 2026 | CVSS 6.5 | GiteaGitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The… | |
| CVE-2026-73126 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the… | |
| CVE-2026-73130 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field… | |
| CVE-2026-73135 | 14 Oct 2026 | CVSS 5.3 | GiteaGitea uses inconsistent repository visibility predicates, and the condition used by some repository-listing endpoints admits repositories whose… | |
| CVE-2026-73273 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with… | |
| CVE-2026-73535 | 14 Oct 2026 | CVSS 8.8 | GiteaGitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and… | |
| CVE-2026-73539 | 14 Oct 2026 | CVSS 7.5 | GiteaGitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before… | |
| CVE-2026-68957 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's API and web issue-search paths do not treat restricted accounts as anonymous viewers when evaluating Limited-visibility repository owners. A… | |
| CVE-2026-68964 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents. A restricted account can retrieve… | |
| CVE-2026-70396 | 14 Oct 2026 | CVSS 5.4 | GiteaGitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other… | |
| CVE-2026-70400 | 14 Oct 2026 | CVSS 5.4 | GiteaGitea's repository migration API accepts a public-only token when the request specifies creation of a private repository. A delegated token intended… | |
| CVE-2026-70402 | 14 Oct 2026 | CVSS 5.8 | GiteaGitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask… | |
| CVE-2026-70406 | 14 Oct 2026 | CVSS 6.5 | GiteaGitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository… | |
| CVE-2026-70407 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's organization-list API does not enforce the read:organization token scope. A token limited to another category, such as read:misc, can… | |
| CVE-2026-71184 | 14 Oct 2026 | CVSS 8.8 | GiteaGitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not… | |
| CVE-2026-71301 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's repository markup endpoint resolves same-repository pull request references without enforcing the viewer's Pull Requests permission. A member… | |
| CVE-2026-60018 | 14 Oct 2026 | CVSS 6.5 | GiteaGitea's OneDev migration downloader reads the entire remote version response into memory without a size limit and uses a client without a timeout. An… | |
| CVE-2026-60021 | 14 Oct 2026 | CVSS 6.5 | GiteaGitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context… | |
| CVE-2026-62925 | 14 Oct 2026 | CVSS 6.5 | GiteaGitea parses Alpine package uploads before enforcing package-size quotas and does not bound the decompressed .PKGINFO data or its dependency and… | |
| CVE-2026-63021 | 14 Oct 2026 | CVSS 6.5 | GiteaGitea's Swift package parser limits each manifest to 128 KiB but does not limit the number of manifests or their aggregate size before reading them… | |
| CVE-2026-63792 | 14 Oct 2026 | CVSS 5.3 | GiteaGitea's collaborative-owner authorization path for reading cross-repository reusable workflows does not exclude fork pull request runs. An approved… | |
| CVE-2026-66849 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's package registry grants authenticated users read access to packages owned by Limited-visibility users without excluding restricted accounts… | |
| CVE-2026-66853 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility… | |
| CVE-2026-66874 | 14 Oct 2026 | CVSS 6.5 | GiteaFor pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or… | |
| CVE-2026-66877 | 14 Oct 2026 | CVSS 8.1 | GiteaGitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval… | |
| CVE-2026-67577 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's activity-feed and contribution-heatmap API handlers do not apply the profile visibility check for restricted accounts viewing… | |
| CVE-2026-53612 | 14 Oct 2026 | CVSS 7.0 | util-linuxutil-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's… | |
| CVE-2026-53613 | 14 Oct 2026 | CVSS 7.0 | util-linuxutil-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy… | |
| CVE-2026-59766 | 14 Oct 2026 | CVSS 4.3 | GiteaGitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated with the… | |
| CVE-2026-59774 | 14 Oct 2026 | CVSS 9.8 | GiteaGitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side… | |
| CVE-2026-60008 | 14 Oct 2026 | CVSS 3.5 | GiteaGitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and… | |
| CVE-2026-60010 | 14 Oct 2026 | CVSS 6.5 | GiteaGitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository… | |
| CVE-2026-15176 | 14 Oct 2026 | CVSS 8.1 | F5 NGINX PlusA vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a… | Fix |
| CVE-2026-25946 | 14 Oct 2026 | CVSS 5.3 | GiteaWhen OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against… | |
| CVE-2026-110645 | 14 Oct 2026 | CVSS 9.8 | ArsalanDotMe video-stitchVideo-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names… | |
| CVE-2026-110646 | 14 Oct 2026 | CVSS 8.1 | beganovich snappdfBeganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by… | |
| CVE-2026-110647 | 14 Oct 2026 | CVSS 7.8 | jinghaihan turnpressTurnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with… | |
| CVE-2026-110648 | 14 Oct 2026 | CVSS 7.8 | adamarcanov compress-fonts@offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying… | |
| CVE-2026-110649 | 14 Oct 2026 | CVSS 9.8 | shahkashani stillsStills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file… | |
| CVE-2026-110650 | 14 Oct 2026 | CVSS 9.8 | anshulkharb thumbnailThe thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute… | |
| CVE-2026-110639 | 14 Oct 2026 | CVSS 9.8 | mborne @mborne/extract@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell… | |
| CVE-2026-110640 | 14 Oct 2026 | CVSS 9.8 | ariym whisper-nodeWhisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or… | |
| CVE-2026-110641 | 14 Oct 2026 | CVSS 8.8 | runnerty @runnerty/executor-decompress@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying… | |
| CVE-2026-110642 | 14 Oct 2026 | CVSS 7.8 | xhtml2pdfxhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by… | |
| CVE-2026-110643 | 14 Oct 2026 | CVSS 9.8 | kky-ykk transcribe2textstranscribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted… | |
| CVE-2026-110644 | 14 Oct 2026 | CVSS 9.8 | ChetanXpro nodejs-whispernodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by… | |
| CVE-2026-110632 | 14 Oct 2026 | CVSS 8.1 | Report One MyReport UpdaterReport One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the… | |
| CVE-2026-110633 | 14 Oct 2026 | CVSS 7.8 | Report One MyReport UpdaterMyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater… | |
| CVE-2026-110634 | 14 Oct 2026 | CVSS 9.8 | danday74 git-diffgit-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to… | |
| CVE-2026-110635 | 14 Oct 2026 | CVSS 9.8 | scionoftech webp-converterwebp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile… | |
| CVE-2026-110636 | 14 Oct 2026 | CVSS 9.8 | revolunet pypdftkpypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell… | |
| CVE-2026-110637 | 14 Oct 2026 | CVSS 7.8 | wastemobile buildebooksbuildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a… | |
| CVE-2026-110638 | 14 Oct 2026 | CVSS 9.8 | zepspaiva doc-recogdoc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths… | |
| CVE-2026-110625 | 14 Oct 2026 | CVSS 6.1 | MacWarrior clipbucket-v5ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET… | |
| CVE-2026-110626 | 14 Oct 2026 | CVSS 6.1 | MacWarrior clipbucket-v5ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded… | |
| CVE-2026-110627 | 14 Oct 2026 | CVSS 4.7 | MacWarrior clipbucket-v5ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML… | |
| CVE-2026-110628 | 14 Oct 2026 | CVSS 8.6 | kanbn kanKan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an… | |
| CVE-2026-110629 | 14 Oct 2026 | CVSS 6.5 | venturedrake laravel-crmVentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role… | |
| CVE-2026-110630 | 14 Oct 2026 | CVSS 6.5 | venturedrake laravel-crmVentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators… | |
| CVE-2026-110631 | 14 Oct 2026 | CVSS 9.8 | moghtech komodoKomodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a… | |
| CVE-2026-110618 | 14 Oct 2026 | CVSS 8.1 | pppscn SmsForwarderSmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers… | |
| CVE-2026-110619 | 14 Oct 2026 | CVSS 4.8 | fatedier frpfrp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug… | |
| CVE-2026-110620 | 14 Oct 2026 | CVSS 6.8 | formbricksFormbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to… | |
| CVE-2026-110621 | 14 Oct 2026 | CVSS 8.8 | swetrixSwetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack… | |
| CVE-2026-110622 | 14 Oct 2026 | CVSS 7.5 | papermerge-corePapermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because… | |
| CVE-2026-110623 | 14 Oct 2026 | CVSS 7.5 | papermerge-corePapermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other… | |
| CVE-2026-110624 | 14 Oct 2026 | CVSS 3.1 | papermerge-corePapermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document… | |
| CVE-2026-110611 | 14 Oct 2026 | CVSS 5.9 | getrebuild rebuildREBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid… | |
| CVE-2026-110612 | 14 Oct 2026 | CVSS 9.8 | wwwlike vlifevlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256… | |
| CVE-2026-110613 | 14 Oct 2026 | CVSS 6.5 | youlaitech youlai-mallyoulai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders… | |
| CVE-2026-110614 | 14 Oct 2026 | CVSS 6.5 | Yiuman citrusYiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to… | |
| CVE-2026-110615 | 14 Oct 2026 | CVSS 7.1 | jishenghua jshERPjshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows authenticated low-privilege… | |
| CVE-2026-110616 | 14 Oct 2026 | CVSS 8.1 | nullclaw NullHubNullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API… | |
| CVE-2026-110617 | 14 Oct 2026 | CVSS 4.8 | rachelos we-mp-rsswe-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated… | |
| CVE-2026-110605 | 14 Oct 2026 | CVSS 5.5 | tomolt libschriftlibschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of… | |
| CVE-2026-110606 | 14 Oct 2026 | CVSS 3.3 | LibreCAD libdxfrwLibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader()… | |
| CVE-2026-110607 | 14 Oct 2026 | CVSS 6.5 | BizSpring ShopBizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid… | |
| CVE-2026-110608 | 14 Oct 2026 | CVSS 5.4 | BizSpring ShopBizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive… | |
| CVE-2026-110609 | 14 Oct 2026 | CVSS 6.5 | dromara skyeyeDromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authenticated low-privileged users to inject SQL via… | |
| CVE-2026-110610 | 14 Oct 2026 | CVSS 5.4 | YunaiV ruoyi-vue-proruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenticated… | |
| CVE-2026-110598 | 14 Oct 2026 | CVSS 6.1 | libyal libpffLibyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap… | |
| CVE-2026-110599 | 14 Oct 2026 | CVSS 7.1 | l-smashL-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that… | |
| CVE-2026-110600 | 14 Oct 2026 | CVSS 5.5 | brechtsanders xlsxioxlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in… |
Page 56 of 168