CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-66822 MEDIUM · 5.9 Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
- CVE-2026-62879 MEDIUM · 5.5 Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
- CVE-2026-62687 MEDIUM · 5.5 Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
- CVE-2026-61931 HIGH · 7.8 Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-59116 MEDIUM · 6.8 Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-58280 HIGH · 7.5 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-54086 MEDIUM · 5.3 SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body…
- CVE-2026-49785 HIGH · 7.8 Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
- CVE-2026-110256 LOW · 3.7 Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter…
- CVE-2026-110255 HIGH · 8.5 Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository…
- CVE-2026-110254 MEDIUM · 4.3 Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6…
- CVE-2026-110249 NONE A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread…
- CVE-2026-110247 NONE Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open,…
- CVE-2026-110240 MEDIUM · 4.8 Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply…
- CVE-2026-110239 MEDIUM · 4.4 Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation.…
- CVE-2026-110238 HIGH · 8.8 Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete…
- CVE-2026-110237 HIGH · 7.3 Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another…
- CVE-2026-110236 HIGH · 7.0 KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the…
- CVE-2026-110235 MEDIUM · 5.5 MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter.…
- CVE-2026-110234 MEDIUM · 4.4 Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture…
- CVE-2026-110233 HIGH · 7.8 Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver…
- CVE-2026-110232 LOW · 3.3 Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an…
- CVE-2026-110231 MEDIUM · 4.7 muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check…
- CVE-2026-110230 MEDIUM · 5.4 XBackBone tot en met 3.8.2 bevat een ontbrekende autorisatiekwetsbaarheid waarmee geverifieerde gebruikers de upload-sharecodes van andere gebruikers kunnen wijzigen via de POST /upload/{id}/vanity-route. Aanvallers kunnen…
- CVE-2026-110229 MEDIUM · 5.4 QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can…
- CVE-2026-110228 MEDIUM · 5.4 wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket…
- CVE-2026-110226 MEDIUM · 5.4 QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned hotels by supplying an arbitrary…
- CVE-2026-110225 LOW · 2.7 Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without…
- CVE-2026-110224 MEDIUM · 5.4 QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave() that echoes rejected alias and search values unescaped in validation errors. Attackers can induce…
- CVE-2026-110223 LOW · 3.1 Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through DNS rebinding or HTTPS redirects.…
- CVE-2026-110222 MEDIUM · 5.3 Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC code…
- CVE-2026-110221 MEDIUM · 5.4 QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeaturePricesSettings form that echoes feature_price_name and impact_value POST values unescaped after validation fails. Attackers…
- CVE-2026-110220 HIGH · 7.1 Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation.…
- CVE-2026-110219 MEDIUM · 5.4 QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject scripts through the price parameter of the back-office Additional Facilities…
- CVE-2026-110218 LOW · 3.7 Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view page.…
- CVE-2026-110217 MEDIUM · 6.5 Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retrieve other operators' BCrypt password hashes via GET /chat/hrs.…
- CVE-2026-110216 HIGH · 7.1 youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUserStatus handler lacks a @PreAuthorize…
- CVE-2026-110215 HIGH · 8.8 youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button permissions to roles via PUT /api/v1/roles/{roleId}/menus. Low-privileged…
- CVE-2026-110214 LOW · 3.7 Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE_DOWNLOAD_SIGN_SECRET…
- CVE-2026-110213 MEDIUM · 4.3 Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' generation results by supplying arbitrary task…
- CVE-2026-110212 MEDIUM · 4.3 Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write uploaded files outside the media directory via the subDir parameter…
- CVE-2026-110211 HIGH · 8.1 iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/{namespace}/{slug}. Attackers can…
- CVE-2026-110210 MEDIUM · 5.3 Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL…
- CVE-2026-110209 MEDIUM · 6.5 Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admin users to read stored secrets through unprotected ApiConfigController and SystemConfigController endpoints. Attackers…
- CVE-2026-110208 HIGH · 7.1 Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API…
- CVE-2026-110207 HIGH · 8.8 Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no…
- CVE-2026-110206 HIGH · 8.8 Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to auto-approve arbitrary shell commands by placing a command substitution…
- CVE-2026-110205 HIGH · 8.8 Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob characters. Attackers…
- CVE-2026-110204 HIGH · 8.8 Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions…
- CVE-2026-110203 HIGH · 8.8 Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine(). Attackers…