CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-76464 CRITICAL · 9.6 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76463 HIGH · 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76459 CRITICAL · 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76458 HIGH · 8.6 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76457 HIGH · 8.6 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76456 HIGH · 8.6 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76455 CRITICAL · 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76454 CRITICAL · 9.1 A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated,…
- CVE-2026-76453 HIGH · 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This…
- CVE-2026-76452 MEDIUM · 4.9 Een kwetsbaarheid in de webgebaseerde beheerinterface van Cisco License On-Prem, voorheen Cisco Smart Software Manager On-Prem (SSM On-Prem), kan een geverifieerde, externe aanvaller in staat…
- CVE-2026-76437 MEDIUM · 4.9 A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker…
- CVE-2026-62253 CRITICAL · 9.8 Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret == ""`.…
- CVE-2026-62252 CRITICAL · 9.8 Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an…
- CVE-2026-62251 HIGH · 8.1 Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the…
- CVE-2026-62176 CRITICAL · 9.1 PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the `deploy/api.py` module generates Python server code by directly interpolating the `agents_file` parameter into an…
- CVE-2026-20362 HIGH · 7.2 A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an…
- CVE-2026-20328 CRITICAL · 9.1 A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker…
- CVE-2026-20321 MEDIUM · 6.5 A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as…
- CVE-2026-20173 MEDIUM · 5.8 A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability…
- CVE-2026-20038 MEDIUM · 5.8 A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker…
- CVE-2026-20032 MEDIUM · 4.4 A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and…
- CVE-2026-106557 HIGH · 7.7 Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently validate TechDocs Markdown extension configuration.…
- CVE-2026-106065 MEDIUM · 6.3 A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width…
- CVE-2026-101886 MEDIUM · 4.0 Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into…
- CVE-2026-92415 MEDIUM · 5.3 — Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to… Apache
- CVE-2026-92414 CRITICAL · 9.1 : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token… Apache
- CVE-2026-33586 NONE Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From” fields when sending emails through OVH mail servers. Due to OVH's default…
- CVE-2026-107278 NONE MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the…
- CVE-2026-107276 NONE MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently,…
- CVE-2026-107273 MEDIUM · 4.3 Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/import/site. Attackers…
- CVE-2026-107272 MEDIUM · 4.7 Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling…
- CVE-2026-107271 MEDIUM · 5.3 Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can…
- CVE-2026-107270 HIGH · 7.1 Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sending…
- CVE-2026-107269 LOW · 3.7 Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can…
- CVE-2026-107210 MEDIUM · 5.3 ImageMagick is gratis en open-source software die wordt gebruikt voor het bewerken en manipuleren van digitale afbeeldingen. Voorafgaand aan 7.1.2-30 en 6.9.13-55 kan een vervaardigde…
- CVE-2026-107209 MEDIUM · 5.9 ImageMagick is gratis en open-source software die wordt gebruikt voor het bewerken en manipuleren van digitale afbeeldingen. Voorafgaand aan 7.1.2-30 en 6.9.13-55, wanneer ImageMagick is…
- CVE-2026-107208 MEDIUM · 5.3 ImageMagick is gratis en open-source software die wordt gebruikt voor het bewerken en manipuleren van digitale afbeeldingen. Voorafgaand aan 7.1.2-30 en 6.9.13-55 kan een vervaardigd…
- CVE-2026-107207 HIGH · 7.2 LMCache tot en met 0.5.5 bevat een kwetsbaarheid voor het vervalsen van verzoeken aan de serverzijde in de frontend-monitoringservice waarmee niet-geverifieerde aanvallers de proxy-toelatingslijst kunnen…
- CVE-2026-107206 CRITICAL · 9.4 LMCache tot en met 0.5.5 bevat een ontbrekende authenticatiekwetsbaarheid in de HTTP-server met multiprocesmodus waarmee externe niet-geverifieerde aanvallers standaard toegang hebben tot beheereindpunten die op…
- CVE-2026-107205 HIGH · 8.6 LMCache tot en met 0.5.5 bevat een ontbrekende authenticatiekwetsbaarheid in de multiprocescoördinator waarmee externe niet-geverifieerde aanvallers standaard toegang hebben tot de HTTP fleet control API…
- CVE-2026-107204 CRITICAL · 9.8 LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint.…
- CVE-2026-107166 MEDIUM · 5.3 Er is een zwakte vastgesteld in Open5GS tot 2.7.7. Dit beveiligingslek heeft invloed op de functie ogs_pfcp_xact_local_create van het bestand src/upf/gtp-path.c van het component GTP-U-ontvangstpad.…
- CVE-2026-106580 MEDIUM · 4.0 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT…
- CVE-2026-106579 MEDIUM · 6.2 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick…
- CVE-2026-106578 MEDIUM · 5.9 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid…
- CVE-2026-106577 MEDIUM · 5.3 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code…
- CVE-2026-106576 MEDIUM · 5.3 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while…
- CVE-2026-106575 MEDIUM · 5.3 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file…
- CVE-2026-106574 MEDIUM · 5.3 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server…
- CVE-2026-106573 MEDIUM · 5.3 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG…