CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2019-16499 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16498 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2019-16497 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2019-16496 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16495 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16494 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16493 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16492 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16491 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16490 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16489 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16488 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2019-16487 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16486 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2019-16485 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16484 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16483 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2019-16482 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16481 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16480 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16479 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2019-16478 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16477 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16476 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16475 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16474 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2019-16473 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16472 NONE Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
- CVE-2019-16447 NONE Afgewezen reden: Gereserveerde ID nooit gepubliceerd en niet gekoppeld aan een VULN-ticket - quota reclaim 2026-11-05
- CVE-2026-82894 NONE Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to trigger arbitrary OFBiz service invocation with…
- CVE-2026-81828 NONE Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated back-office user holding catalog permission to cause the…
- CVE-2026-81816 NONE XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding content-author permission to…
- CVE-2026-81815 NONE SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a remote unauthenticated attacker to disclose…
- CVE-2026-81808 NONE Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only catalog view permission to bulk-modify…
- CVE-2026-81744 NONE Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only a limited content-create permission to…
- CVE-2026-81734 NONE Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding only catalog view permission to create,…
- CVE-2026-76152 NONE Path traversal en een ontbrekende autorisatiecontrole in de imageCrop- en imageRotate-services van Apache OFBiz tot en met versie 24-09-2007 op alle platforms stellen een externe…
- CVE-2026-76150 NONE Path traversal and missing authorization check in the replaceImageToExistImage service in Apache OFBiz through 24.09.07 on all platforms allows a remote authenticated attacker with only…
- CVE-2026-74841 NONE In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from a request-supplied userTenantId parameter and requested a delegator for it before confirming the…
- CVE-2026-73580 NONE Missing authorization check in the getHRChild service in Apache OFBiz through 24.09.07 on all platforms allows a remote unauthenticated attacker to recursively enumerate Human Resources…
- CVE-2026-73578 NONE Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to bypass the request-map authentication policy…
- CVE-2026-73577 NONE Incorrect authorization in RequestHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to bypass the authentication requirement of a…
- CVE-2026-71901 HIGH · 8.1 Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz. An authenticate user with access to sfa component can override the service to use…
- CVE-2026-68524 NONE An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a "file:" URI to cause OFBiz to load an attacker-controlled Screen…
- CVE-2026-66903 MEDIUM · 6.5 Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.08. Users…
- CVE-2026-123032 HIGH · 7.3 A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function ConnectionManager.connect of the file im_server/app.py of the…
- CVE-2026-119744 HIGH · 8.8 Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess) that allows an authenticated attacker to impersonate any other user, including root,…
- CVE-2026-115738 MEDIUM · 6.5 SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without sanitization or parameterized queries.
- CVE-2026-106716 NONE ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the Android and Offerwall JavaScript…
- CVE-2026-106715 NONE NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page through…