CVE-2023-35988 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35771 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35770 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35768 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35766 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35761 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35190 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35135 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35125 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35122 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35063 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35059 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35058 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-35000 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-34996 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-34428 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-34393 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-34313 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-34084 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-32733 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-32648 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-32640 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-32631 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-32630 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-32287 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-32286 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-31270 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-31249 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-31243 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-31202 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-31201 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-30761 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-29496 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-28825 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-28822 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-28721 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-28719 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-28717 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-28403 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27924 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27885 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27884 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27883 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27880 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27528 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27511 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27393 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27381 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27302 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27299 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-26594 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-25778 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-25079 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-24596 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-24543 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-24541 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-24462 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-24017 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-24013 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-23905 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22658 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22431 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2022-51007 - Rejected reason: This CVE ID has been rejected.

CVE-2022-51006 - Rejected reason: This CVE ID has been rejected.

CVE-2022-51005 - Rejected reason: This CVE ID has been rejected.

CVE-2022-51004 - Rejected reason: This CVE ID has been rejected.

CVE-2022-51003 - Rejected reason: This CVE ID has been rejected.

CVE-2022-51002 - Rejected reason: This CVE ID has been rejected.

CVE-2022-51001 - Rejected reason: This CVE ID has been rejected.

CVE-2021-48005 - Rejected reason: This CVE ID has been rejected.

CVE-2021-48004 - Rejected reason: This CVE ID has been rejected.

CVE-2021-48003 - Rejected reason: This CVE ID has been rejected.

CVE-2021-48002 - Rejected reason: This CVE ID has been rejected.

CVE-2021-48001 - Rejected reason: This CVE ID has been rejected.

CVE-2021-48000 - Rejected reason: This CVE ID has been rejected.

CVE-2021-47999 - Rejected reason: This CVE ID has been rejected.

CVE-2021-47998 - Rejected reason: This CVE ID has been rejected.

CVE-2021-47997 - Rejected reason: This CVE ID has been rejected.

CVE-2026-81814 - Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles ar

CVE-2026-81753 - Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficie

CVE-2026-81743 - Affected versions of Flowintel allow the LOG_FILE configuration value to be modified through system

CVE-2026-81677 - The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of t

CVE-2026-81676 - A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the `limit_videos` parameter is

CVE-2026-81675 - The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the i

CVE-2026-81674 - The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito param

CVE-2026-81673 - The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_a

CVE-2026-81672 - SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handlin

CVE-2026-81668 - A flaw was found in Katello where the Content View Filter Rules API does not properly enforce author

CVE-2026-81662 - Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings u

CVE-2026-81659 - Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and

CVE-2026-81658 - A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorizat

CVE-2026-81562 - A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the functio

CVE-2026-81560 - A vulnerability was identified in blackms aistack up to 1.6.1. Affected by this issue is some unknow

CVE-2026-74233 - Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19

CVE-2026-74232 - Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1

CVE-2026-66155 - A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-n

CVE-2026-5218 - Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softt

CVE-2026-17562 - Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro

CVE-2026-81625 - A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test (V

CVE-2026-81581 - Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be e

CVE-2026-81579 - In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys

CVE-2026-81576 - If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per conne

CVE-2026-81575 - If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with op

CVE-2026-81574 - In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in c

CVE-2026-81573 - If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handl

CVE-2026-81572 - In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --

CVE-2026-81279 - Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.

CVE-2026-81277 - Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.

CVE-2026-81276 - Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions.

CVE-2026-81274 - Subscriber Broken Access Control in Ditty <= 3.1.67 versions.

CVE-2026-81273 - Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.

CVE-2026-81272 - Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions.

CVE-2026-81271 - Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.

CVE-2026-80433 - Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions.

CVE-2026-78293 - Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.

CVE-2026-78292 - Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.

CVE-2026-78289 - Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.

CVE-2026-78288 - Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.

CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.

CVE-2026-78285 - Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.

CVE-2026-78283 - Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.

CVE-2026-78281 - Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.

CVE-2026-78276 - Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions.

CVE-2026-78275 - Editor Arbitrary File Deletion in Fluent Boards Pro <= 2.0.11 versions.

CVE-2026-78274 - Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.

CVE-2026-78273 - Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions.

CVE-2026-78271 - Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions.

CVE-2026-78261 - Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.

CVE-2026-78260 - Unauthenticated SQL Injection in Epayco <= 8.4.6 versions.

CVE-2026-78257 - Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.

CVE-2026-75020 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability i

CVE-2026-75005 - Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin

CVE-2026-74848 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Ap

CVE-2026-59355 - In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs

CVE-2026-59354 - In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynami

CVE-2026-32566 - Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.6

CVE-2026-32564 - Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVE-2026-32550 - Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.

CVE-2026-32479 - Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions.

CVE-2026-27330 - Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions.

CVE-2026-78333 - The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submit

CVE-2026-78139 - The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription be

CVE-2026-78138 - The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX actio

CVE-2026-78137 - The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on

CVE-2026-78125 - The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its

CVE-2026-77991 - Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager

CVE-2026-77990 - Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla

CVE-2026-77989 - Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events M

CVE-2026-77035 - Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form

CVE-2026-77034 - Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in J

CVE-2026-77018 - The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may s

CVE-2026-77017 - The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may s

CVE-2026-77016 - The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user'

CVE-2026-76549 - The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF chec

CVE-2026-59278 - JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted package

CVE-2026-59275 - A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the

CVE-2026-59274 - The UnZipTransformer does not limit decompressed entry size or entry count when processing archives.

CVE-2026-59271 - When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cle

CVE-2026-59270 - Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an a

CVE-2026-47894 - Spring Cloud Config Server native environment repository allows exposure of configuration files outs

CVE-2026-47893 - A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive use

CVE-2026-47892 - A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerab

CVE-2026-47891 - A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not corr

CVE-2026-47890 - Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Event

CVE-2026-47889 - A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies with

CVE-2026-47888 - A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framewo

CVE-2026-47887 - A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and

CVE-2026-47886 - Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulner

CVE-2026-47885 - The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMe

CVE-2026-47884 - Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has

CVE-2026-47883 - UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching pa

CVE-2026-47881 - Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physic

CVE-2026-47880 - A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound compo

CVE-2026-47879 - Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for d

CVE-2026-47878 - DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Bas

CVE-2026-47877 - Spring Security Authorization Server's default consent page renders user-controlled values without H

CVE-2026-47875 - Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are v

CVE-2026-47864 - SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.O

CVE-2026-47849 - Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation

CVE-2026-19715 - The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict access

CVE-2026-19454 - The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check b

CVE-2026-19225 - The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to net

CVE-2026-19223 - The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network adminis

CVE-2026-16569 - The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugi

CVE-2026-16568 - The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugi

CVE-2026-16567 - The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issui

CVE-2026-13416 - The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputt

CVE-2026-13415 - The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing se

CVE-2026-13414 - The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX act

CVE-2023-27508 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-27503 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-23544 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22446 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22445 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22437 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22434 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22433 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22430 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22426 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22423 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22420 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22364 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22352 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22343 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22328 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2023-22289 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because i

CVE-2026-81491 - A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_

CVE-2026-16895 - A logic vulnerability (fail-open condition) has been identified within the Metasploit Framework's JS

CVE-2026-81486 - A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the

CVE-2026-81485 - A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this

CVE-2026-19398 - An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  a

CVE-2026-81421 - A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element i

CVE-2026-80183 - In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can l

CVE-2026-47874 - The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, c

CVE-2026-47863 - In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled

CVE-2026-47862 - An attacker who can set the file_name header on a message reaching a ZipTransformer with ZipResultTy

CVE-2026-47861 - An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbo

CVE-2026-47860 - An attacker who can publish to a queue consumed by an application that has enabled message decompres

CVE-2026-47859 - RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6

CVE-2026-47857 - In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled

CVE-2026-47856 - Spring Integration's JSON to object conversion uses the json__TypeId__ header to choose the deserial

CVE-2026-47852 - A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malici

CVE-2026-47851 - Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in t

CVE-2026-47850 - Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root wh

CVE-2026-47845 - In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when

CVE-2026-81203 - A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affect

CVE-2026-80158 - A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module

CVE-2026-75340 - The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlin

CVE-2026-75338 - disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Con

CVE-2026-75336 - Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json a

CVE-2026-75332 - Zyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService.down

CVE-2026-75330 - The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server

CVE-2026-69129 - KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluste

CVE-2026-65956 - KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the S

CVE-2026-47666 - Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Pe

CVE-2026-47665 - Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Pe

CVE-2026-21808 - HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which incr

CVE-2026-21807 - HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protecti

CVE-2026-18823 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-62341 - HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compr

CVE-2026-81202 - A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function creat

CVE-2026-77611 - SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authent

CVE-2026-77368 - SeaweedFS is a distributed storage system for files and blobs. In version 4.39, the filer's TUS resu

CVE-2026-77317 - SeaweedFS is a distributed storage system for files and blobs. In versions from 3.88 through 4.39, t

CVE-2026-77298 - SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3

CVE-2026-75333 - yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are dire

CVE-2026-75331 - tamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS. The /uploadFile and /i

CVE-2026-75329 - The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no aut

CVE-2026-75328 - In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController

CVE-2026-65930 - LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerabili