CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-114551 MEDIUM · 5.9 MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is not required…
- CVE-2026-114550 HIGH · 8.1 libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…
- CVE-2026-114549 CRITICAL · 9.8 NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is…
- CVE-2024-27834 CRITICAL · 9.5 Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability… Apple
- CVE-2026-121736 MEDIUM · 5.3 NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can…
- CVE-2026-121735 LOW · 3.7 blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmed_sent_at. Attackers…
- CVE-2026-121734 MEDIUM · 6.5 ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without…
- CVE-2026-121733 MEDIUM · 5.4 Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows authenticated customers to upload HTML files via the RMA send-message endpoint without type or…
- CVE-2026-121732 LOW · 2.7 RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assign fees and payments to students of other schools via MassAssignFees.php and…
- CVE-2026-121731 HIGH · 8.8 RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php.…
- CVE-2026-121730 MEDIUM · 6.5 emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address. Attackers can…
- CVE-2026-121729 HIGH · 8.3 emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke…
- CVE-2026-121728 MEDIUM · 5.3 SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled. Attackers can obtain…
- CVE-2026-121727 HIGH · 7.5 Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes…
- CVE-2026-121582 MEDIUM · 6.5 A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint.…
- CVE-2026-121581 MEDIUM · 4.3 A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of the file /api/v1/providers/{id}/test of the component Provider Test-Connection Endpoint.…
- CVE-2026-121565 HIGH · 7.4 Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
- CVE-2026-121539 MEDIUM · 6.3 A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the…
- CVE-2026-121535 LOW · 3.7 A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room…
- CVE-2026-121520 NONE In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended…
- CVE-2026-120775 HIGH · 7.2 Tanium addressed a heap-based buffer overflow vulnerability in Deploy.
- CVE-2026-118237 NONE An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving possession of a host key, babeld's SSH implementation…
- CVE-2026-116669 MEDIUM · 6.5 Tanium addressed an improper access controls vulnerability in Discover. Tanium
- CVE-2026-116668 MEDIUM · 4.3 Tanium addressed an uncontrolled resource consumption vulnerability in Discover. Tanium
- CVE-2026-116667 MEDIUM · 4.2 Tanium addressed an improper access controls vulnerability in Discover. Tanium
- CVE-2026-116666 MEDIUM · 4.3 Tanium addressed an information disclosure vulnerability in Discover. Tanium
- CVE-2026-116665 MEDIUM · 4.3 Tanium addressed an information disclosure vulnerability in Discover. Tanium
- CVE-2026-116664 LOW · 3.1 Tanium addressed an improper access controls vulnerability in Discover. Tanium
- CVE-2026-116663 MEDIUM · 6.5 Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-116661 MEDIUM · 6.5 Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-116654 MEDIUM · 6.5 Tanium addressed an improper input validation vulnerability in Threat Response.
- CVE-2026-116653 MEDIUM · 4.3 Tanium addressed an improper input validation vulnerability in Threat Response.
- CVE-2026-116652 MEDIUM · 4.3 Tanium addressed a business logic error in Threat Response.
- CVE-2026-116651 HIGH · 7.5 Tanium addressed an unauthorized code execution vulnerability in Threat Response.
- CVE-2026-116650 HIGH · 7.5 Tanium addressed an unauthorized code execution vulnerability in Threat Response.
- CVE-2026-116648 MEDIUM · 4.1 Tanium addressed an improper output sanitization vulnerability in Discover. Tanium
- CVE-2026-116646 MEDIUM · 4.3 Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.
- CVE-2026-111085 NONE Reden van afwijzing: deze CVE-ID is afgewezen of ingetrokken door de CVE-nummeringsinstantie.
- CVE-2026-110288 NONE A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration…
- CVE-2026-109836 MEDIUM · 6.7 The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be…
- CVE-2026-108516 NONE Reden van afwijzing: deze CVE-ID is afgewezen of ingetrokken door de CVE-nummeringsinstantie.
- CVE-2026-108327 MEDIUM · 5.0 Tanium addressed a path traversal vulnerability in Tanium Data Service.
- CVE-2026-108324 MEDIUM · 6.5 Tanium addressed a denial of service vulnerability in Tanium Client.
- CVE-2026-107916 NONE Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- CVE-2026-104608 NONE A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into…
- CVE-2026-103429 NONE Reden van afwijzing: deze CVE-ID is afgewezen of ingetrokken door de CVE-nummeringsinstantie.
- CVE-2022-30267 HIGH · 7.5 Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to…
- CVE-2022-29966 CRITICAL · 9.8 Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.
- CVE-2026-22060 NONE All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are…
- CVE-2026-22058 NONE StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain…