CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-108967 HIGH · 7.3 A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the…
- CVE-2026-108966 HIGH · 7.3 A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument…
- CVE-2026-109758 NONE Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable…
- CVE-2026-108965 HIGH · 7.3 Er is een kwetsbaarheid vastgesteld in SourceCodester Performance Indicator System 1.0. Dit beveiligingslek heeft invloed op onbekende code van het bestand /opils/staff/edit_quantity.php. Het uitvoeren van…
- CVE-2026-108964 HIGH · 7.3 Er is een kwetsbaarheid gevonden in SourceCodester Performance Indicator System 1.0. Dit heeft invloed op een onbekend deel van het bestand /opils/admin/addproduct.php. Het uitvoeren van…
- CVE-2026-108962 MEDIUM · 6.3 Er is een kwetsbaarheid gevonden in storyicon comfyui_segment_anything tot ab6395596399d5048639cdab7e44ec9fae857a93. Beïnvloed door dit probleem is de functie SLConfig._file2dict van het bestand local_groundingdino/util/slconfig.py van het onderdeel…
- CVE-2026-108961 MEDIUM · 6.3 Er is een fout gevonden in PaddlePaddle PaddleX tot 3.7.2. Beïnvloed door deze kwetsbaarheid is de functie NormalizeImage.__init__ van het bestand paddlex/inferentie/modellen/text_detection/processors.py van de component…
- CVE-2026-109786 MEDIUM · 5.3 In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on " suffix after the host address. Because OpenSSH logs the offered…
- CVE-2026-108960 MEDIUM · 5.3 Er is een kwetsbaarheid gedetecteerd in Tiiny-AI PowerInfer tot 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Getroffen is de functie create_striped_mat_to_gpu van het bestand smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu van de component FFN GPU-split Loader.…
- CVE-2026-108959 MEDIUM · 6.3 Er is een beveiligingslek gedetecteerd in itsourcecode Online Cake Ordering System 1.0. Dit heeft invloed op een onbekende functie van het bestand /addtransacdetail.php. De manipulatie…
- CVE-2026-108958 MEDIUM · 6.3 Er is een zwakte vastgesteld in TensorLayer tot 2.2.4. Dit heeft invloed op de functie load_hdf5_graph van de bestandstensorlaag/bestanden/utils.py van de component HDF5 Loading. Het…
- CVE-2026-108957 MEDIUM · 6.3 Er is een beveiligingsfout ontdekt in TinyLLaVA TinyLLaVA_Factory tot 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. Het getroffen element is de function _load_text_config van het bestand tinyllava/model/configuration_tinyllava.py van het onderdeel TinyLlavaConfig.…
- CVE-2026-9268 LOW · 2.7 GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-96893 HIGH · 7.3 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-92883 HIGH · 8.7 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-92528 MEDIUM · 4.2 GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-85529 MEDIUM · 5.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-84284 MEDIUM · 5.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-82632 LOW · 3.1 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-81839 HIGH · 7.7 GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-7767 MEDIUM · 5.8 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-78335 MEDIUM · 4.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-6567 MEDIUM · 4.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-5954 MEDIUM · 4.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-35001 HIGH · 7.0 OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with…
- CVE-2026-16301 HIGH · 8.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-16275 MEDIUM · 5.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-14814 HIGH · 8.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could… Gitlab
- CVE-2026-14552 MEDIUM · 4.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-14210 MEDIUM · 4.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-108956 HIGH · 7.3 Er werd een kwetsbaarheid vastgesteld in code-projecten Online Reviewer System 1.0. Het getroffen element is een onbekende functie van het bestand /recensent/systeem/systeem/beheerders/beheren/gebruikers/btn_functions.php van de component…
- CVE-2026-108955 MEDIUM · 5.3 Er is een kwetsbaarheid vastgesteld in Tiiny-AI PowerInfer tot 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Beïnvloed is de functie gguf_init_from_file van het bestand ggml.c van de component GGUF Parser. Deze…
- CVE-2026-108954 MEDIUM · 6.3 A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer…
- CVE-2026-108948 MEDIUM · 5.4 A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile…
- CVE-2026-108947 MEDIUM · 5.3 A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of the…
- CVE-2026-105458 MEDIUM · 4.3 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-104661 MEDIUM · 4.3 GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-103549 LOW · 2.7 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-101168 MEDIUM · 6.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-100755 MEDIUM · 4.6 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-100104 LOW · 3.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… Gitlab
- CVE-2026-89124 MEDIUM · 4.3 Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive…
- CVE-2026-89122 MEDIUM · 6.1 SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked…
- CVE-2026-89121 MEDIUM · 4.7 SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local…
- CVE-2026-89120 HIGH · 7.1 A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single…
- CVE-2026-89118 MEDIUM · 5.3 SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but…
- CVE-2026-89117 MEDIUM · 6.1 SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and…
- CVE-2026-89116 MEDIUM · 5.9 The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the…
- CVE-2026-89113 HIGH · 8.8 SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted…
- CVE-2026-89112 MEDIUM · 6.5 The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using…