CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-25291 HIGH · 7.8 Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. Qualcomm
- CVE-2026-25274 MEDIUM · 6.7 Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. Qualcomm
- CVE-2026-25273 MEDIUM · 6.7 Memory Corruption when processing camera operations due to out-of-bounds write during driver updates. Qualcomm
- CVE-2026-25272 MEDIUM · 6.7 Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation. Qualcomm
- CVE-2026-25270 MEDIUM · 6.7 Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. Qualcomm
- CVE-2026-25269 MEDIUM · 6.7 Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. Qualcomm
- CVE-2026-25267 HIGH · 7.8 Memory corruption when non-secure loader rewrites page tables before secure memory initialization. Qualcomm
- CVE-2026-25263 MEDIUM · 6.6 Geheugenbeschadiging tijdens het verwerken van IOCTL-opdracht aangeroepen vanuit gebruikersruimte naar de kernel met ongeldige parameters. Qualcomm
- CVE-2026-105778 CRITICAL · 9.9 A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi…
- CVE-2026-105776 HIGH · 7.3 A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin_transaction.php. This manipulation…
- CVE-2026-105701 HIGH · 8.8 The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This…
- CVE-2026-97300 MEDIUM · 6.5 Unauthenticated Broken Access Control in WP Event Solution
- CVE-2026-75962 HIGH · 7.2 The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to…
- CVE-2026-41563 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Sitemovr
- CVE-2026-41558 HIGH · 7.5 Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro
- CVE-2026-39789 HIGH · 7.5 Unauthenticated Broken Access Control in Fluent Affiliate Pro
- CVE-2026-39760 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook
- CVE-2026-39723 HIGH · 7.5 Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a…
- CVE-2026-39599 MEDIUM · 4.3 Contributor Broken Access Control in WDS MCP Content Manager
- CVE-2026-32582 MEDIUM · 6.5 Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0.
- CVE-2026-32576 MEDIUM · 6.5 Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro…
- CVE-2026-105775 MEDIUM · 4.3 A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions…
- CVE-2026-105708 MEDIUM · 4.3 A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component…
- CVE-2026-105072 HIGH · 7.5 Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
- CVE-2026-105707 MEDIUM · 5.3 A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The manipulation…
- CVE-2026-105706 MEDIUM · 4.3 A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery.…
- CVE-2026-105705 MEDIUM · 4.3 A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results…
- CVE-2026-105704 HIGH · 7.3 A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument…
- CVE-2026-105703 MEDIUM · 4.7 A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file…
- CVE-2026-105621 MEDIUM · 5.4 A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial…
- CVE-2026-105611 LOW · 2.7 A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint.…
- CVE-2026-105610 MEDIUM · 4.7 A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter…
- CVE-2026-105573 MEDIUM · 4.3 A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity…
- CVE-2026-105572 MEDIUM · 4.3 A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice…
- CVE-2026-105571 HIGH · 7.3 A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component…
- CVE-2026-105487 MEDIUM · 6.3 A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component…
- CVE-2026-105486 HIGH · 7.3 A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing…
- CVE-2026-105484 CRITICAL · 10.0 A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile…
- CVE-2026-104380 MEDIUM · 5.3 Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one. On HTTP/2 and…
- CVE-2026-104044 MEDIUM · 6.2 A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM)…
- CVE-2026-104043 MEDIUM · 5.5 A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow…
- CVE-2026-104042 MEDIUM · 5.5 A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request…
- CVE-2026-104041 MEDIUM · 5.5 A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because…
- CVE-2026-104040 NONE Rejected reason: Red Hat Product Security has been notified that this CVE is a duplicated of CVE-2026-104047
- CVE-2026-104039 MEDIUM · 4.7 A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic Security… Fedoraproject Redhat
- CVE-2026-92821 MEDIUM · 6.8 A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments, an…
- CVE-2026-105472 MEDIUM · 6.3 Er is een zwakte vastgesteld in het girishsaraf Online-Appointment-Booking-System tot f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Het getroffen element is een onbekende functie van het bestand book.php van de component…
- CVE-2026-104038 MEDIUM · 5.9 A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security…
- CVE-2026-104037 MEDIUM · 5.5 A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to…
- CVE-2026-104036 MEDIUM · 5.8 A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination…