CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-76742 CRITICAL · 9.8 Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the…
- CVE-2026-76741 MEDIUM · 6.5 Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the…
- CVE-2026-76061 MEDIUM · 5.5 A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malicious container or local attacker could use a Container Runtime…
- CVE-2026-73278 CRITICAL · 9.8 Gitea's OAuth2- en OpenID Connect-aanmeldingspaden vereisen geen WebAuthn-uitdaging wanneer WebAuthn de enige geconfigureerde tweede factor van het account is. Een partij die in staat is… Gitea
- CVE-2026-70357 HIGH · 7.5 Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves the hostname when… Gitea
- CVE-2026-106454 MEDIUM · 4.3 Twisted is een op gebeurtenissen gebaseerd raamwerk voor internettoepassingen, dat Python 3.6+ ondersteunt. In 25.5.0 en eerder vertaalt wildcardToRegexp () in twisted/mail/imap4.py het IMAP-sterretje en…
- CVE-2026-106453 MEDIUM · 5.3 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decompressed-length header before validating the compressed input,…
- CVE-2026-106452 MEDIUM · 5.3 yawkat LZ4 Java biedt LZ4-compressie voor Java. Voorafgaand aan 1.11.2 valideert net.jpountz.lz4.LZ4BlockInputStream refill() dat het gecomprimeerdeLen-veld in een oudere LZ4Block-header niet-negatief is, maar een gecomprimeerde…
- CVE-2026-106451 NONE yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file but derives the…
- CVE-2026-106450 MEDIUM · 5.3 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() allocates two new 4 MiB block buffers whenever a maximum-block-size frame header…
- CVE-2026-106449 LOW · 3.7 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false handles each well-formed empty LZ4Block by recursively…
- CVE-2026-106448 NONE StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map decoding path creates ordinary JavaScript objects and…
- CVE-2026-106447 NONE StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags…
- CVE-2026-106446 CRITICAL · 9.8 Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects while validating only…
- CVE-2026-106445 NONE Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list…
- CVE-2026-106444 MEDIUM · 4.7 Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedString() in lib/handlebars/compiler/code-gen.js to emit static template text…
- CVE-2026-106063 MEDIUM · 6.3 A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates…
- CVE-2026-105244 MEDIUM · 5.3 Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record… Apache
- CVE-2026-105243 MEDIUM · 5.3 Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts… Apache
- CVE-2026-105242 MEDIUM · 5.3 Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying… Apache
- CVE-2026-105241 MEDIUM · 5.3 Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16… Apache
- CVE-2026-105240 MEDIUM · 5.3 Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content ended the debug output… Apache
- CVE-2026-105239 MEDIUM · 5.3 Onjuiste neutralisatie van Null Byte of NUL-tekenkwetsbaarheid in de EventLogAppender van Apache log4net. Een NUL-teken in gelogde inhoud beëindigde op dat moment de Windows Event… Apache
- CVE-2026-105111 MEDIUM · 4.7 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages…
- CVE-2026-104636 HIGH · 7.5 Gitea valideerde de initiële externe URL voor push-spiegels, externe controles van wiki's en ophalingen van gemigreerde pull-aanvraagkoppen, maar de daaropvolgende onbewerkte Git-bewerkingen volgden HTTP-omleidingen zonder… Gitea
- CVE-2026-104632 HIGH · 8.8 Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required… Gitea
- CVE-2026-104626 HIGH · 8.8 A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that… Gitea
- CVE-2026-104048 MEDIUM · 6.8 A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only… Fedoraproject Redhat
- CVE-2026-104047 MEDIUM · 5.3 A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query… Fedoraproject Redhat
- CVE-2026-103670 HIGH · 7.5 When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed…
- CVE-2026-103667 MEDIUM · 5.4 Gitea's container registry served blob downloads with a `Content-Type` taken from the media type declared in pushed image manifests, without a `Content-Disposition` or restrictive content…
- CVE-2026-103504 HIGH · 8.1 Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's per-unit access, and the requested level was…
- CVE-2026-103059 CRITICAL · 9.1 When Gitea's built-in SSH server is enabled (`START_SSH_SERVER = true`), the presented public key was looked up with an SQL `LIKE` comparison of its encoded…
- CVE-2026-103009 HIGH · 7.1 Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized shard… Elastic
- CVE-2026-103008 MEDIUM · 6.5 Ongecontroleerde recursie (CWE-674) in Elasticsearch kan leiden tot Denial of Service via een speciaal ontworpen verzoek dat ervoor zorgt dat de server een diep geneste… Elastic
- CVE-2026-103007 HIGH · 7.2 Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch… Elastic
- CVE-2026-103006 MEDIUM · 6.5 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the… Elastic
- CVE-2026-103005 MEDIUM · 6.5 Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with connector management… Elastic
- CVE-2026-102413 MEDIUM · 6.2 Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes…
- CVE-2026-102412 MEDIUM · 6.5 Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated Kibana user with… Elastic
- CVE-2026-102411 MEDIUM · 6.5 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforces a size limit… Elastic
- CVE-2026-102410 MEDIUM · 4.3 Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An internal API surface within the… Elastic
- CVE-2026-102409 MEDIUM · 6.5 Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive… Elastic
- CVE-2026-102408 MEDIUM · 4.3 Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowup (CAPEC-492). The ES|QL CHUNK function's recursive chunking… Elastic
- CVE-2026-102407 MEDIUM · 5.4 Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user with… Elastic
- CVE-2026-102406 HIGH · 8.8 Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing… Elastic
- CVE-2026-102404 MEDIUM · 6.5 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted… Elastic
- CVE-2026-102169 MEDIUM · 6.5 On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with…
- CVE-2026-102168 MEDIUM · 6.5 Op getroffen Arista Wi-Fi-toegangspunten met Captive Portal ingeschakeld, kan een niet-geverifieerde draadloze client die is verbonden met een SSID met Captive-Portal de portaalservice laten crashen…
- CVE-2026-102167 HIGH · 7.5 On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor…