CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-107176 MEDIUM · 6.8 Er is een fout gevonden in de cluster-monsters-operator. De RBAC-rol coreos-pull-secret-reader in namespace openshift-config verleent get, list en watch permissies op alle geheime bronnen zonder…
- CVE-2026-107161 HIGH · 7.5 Er werd een heap-based buffer overflow fout gevonden in Cyrus SASL. De functie add_to_challenge() in de DIGEST-MD5-plug-in berekent de grootte van de buffer die nodig…
- CVE-2026-107313 MEDIUM · 4.2 pgjdbc, de PostgreSQL JDBC-driver, versies 42.7.4 en 42.7.5, kan de vorige inhoud van de GSS-verzendbuffer verzenden in plaats van het eerste deel van een waarde…
- CVE-2026-107225 MEDIUM · 6.5 Excelize is een Go-taalbibliotheek voor het lezen en schrijven van Microsoft Excel-spreadsheets. Van 2.8.0 tot 2.11.0 controleren de vul-, rand- en lettertype-extractiepredikaten van GetStyle alleen… Excelize
- CVE-2026-107224 MEDIUM · 6.5 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit… Excelize
- CVE-2026-107223 HIGH · 7.5 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min… Excelize
- CVE-2026-107222 MEDIUM · 6.5 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences… Excelize
- CVE-2026-107221 MEDIUM · 6.5 Excelize is een Go-taalbibliotheek voor het lezen en schrijven van Microsoft Excel-spreadsheets. Van 2.0.0 tot 2.11.0, checkRow verkleint de plak van de doelcel uit de… Excelize
- CVE-2026-107220 MEDIUM · 6.5 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an… Excelize
- CVE-2026-107219 HIGH · 7.5 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs… Excelize
- CVE-2026-107218 MEDIUM · 5.3 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit… Excelize
- CVE-2026-107217 HIGH · 7.5 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2 and from 1.1.0 to 1.4.1 in… Excelize
- CVE-2026-106164 HIGH · 7.3 In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption,…
- CVE-2026-103371 HIGH · 7.5 Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: from 2.0.0 before 2.0.3. Users are recommended to…
- CVE-2026-96335 HIGH · 7.5 Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2.
- CVE-2026-56851 HIGH · 7.5 The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
- CVE-2026-107216 HIGH · 7.5 Excelize is een Go-taalbibliotheek voor het lezen en schrijven van Microsoft Excel-spreadsheets. Van 2.8.1 tot 2.11.0 roept ANCHORARRAY recursief de geëxporteerde CalcCellValue-functie aan, waardoor bij… Excelize
- CVE-2026-107215 HIGH · 7.5 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an… Excelize
- CVE-2026-107214 HIGH · 7.5 Excelize is een Go-taalbibliotheek voor het lezen en schrijven van Microsoft Excel-spreadsheets. Van 2.3.1 tot 2.11.0 voert de decryptieverzending onvoldoende structurele en parametervalidatie uit voordat… Excelize
- CVE-2026-107213 MEDIUM · 5.5 Excelize is een Go-taalbibliotheek voor het lezen en schrijven van Microsoft Excel-spreadsheets. Van 2.9.0 tot 2.11.0 controleert GetSlicers op ExtLst, maar verwijdert ws.Drawing zonder te… Excelize
- CVE-2026-107212 HIGH · 7.5 Excelize is een Go-taalbibliotheek voor het lezen en schrijven van Microsoft Excel-spreadsheets. Van 2.1.0 tot 2.11.0 accepteert Rows.Columns een vooruitkijkend rijnummer boven TotalRows zonder de… Excelize
- CVE-2026-107211 MEDIUM · 5.5 Excelize is een Go-taalbibliotheek voor het lezen en schrijven van Microsoft Excel-spreadsheets. Van 2.8.1 tot 2.11.0 worden afzonderlijk geparseerde draaitabelveldindices gebruikt om het veldnaamsegment van… Excelize
- CVE-2026-106067 MEDIUM · 6.3 A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width…
- CVE-2026-106066 MEDIUM · 6.3 A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height…
- CVE-2026-95606 CRITICAL · 9.8 Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through…
- CVE-2026-95605 CRITICAL · 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This…
- CVE-2026-95595 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-remove-google-fonts allows…
- CVE-2026-95534 HIGH · 8.8 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elements For…
- CVE-2026-94670 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through…
- CVE-2026-94662 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Stored XSS.…
- CVE-2026-92543 NONE Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves…
- CVE-2026-92542 NONE The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user…
- CVE-2026-76501 CRITICAL · 9.8 A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an…
- CVE-2026-76500 CRITICAL · 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive…
- CVE-2026-76499 CRITICAL · 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive…
- CVE-2026-76498 CRITICAL · 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive…
- CVE-2026-76488 MEDIUM · 6.5 A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on…
- CVE-2026-76486 CRITICAL · 9.8 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to…
- CVE-2026-76485 CRITICAL · 9.8 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to…
- CVE-2026-76484 HIGH · 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem…
- CVE-2026-76483 CRITICAL · 9.1 Als onderdeel van Cisco's voortdurende inzet voor proactieve beveiliging en productkwaliteit, heeft het engineeringteam voor Cisco License On-Prem, voorheen Cisco Smart Software Manager On-Prem (SSM…
- CVE-2026-76482 CRITICAL · 10.0 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem…
- CVE-2026-76480 CRITICAL · 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem…
- CVE-2026-76472 HIGH · 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76471 CRITICAL · 9.8 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause…
- CVE-2026-76470 HIGH · 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76469 HIGH · 7.4 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76468 HIGH · 8.2 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76467 HIGH · 7.5 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76465 CRITICAL · 9.8 A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000…