CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-40573 HIGH · 8.6 NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` interpreter runs in Ring 0 with…
- CVE-2026-119342 MEDIUM · 5.3 Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG…
- CVE-2026-119340 MEDIUM · 5.5 Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares them only with…
- CVE-2026-117666 NONE Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate…
- CVE-2026-117645 NONE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework phoenix_html allows an attacker who controls attribute names to inject attributes and…
- CVE-2026-119338 NONE Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while receiving it by value,…
- CVE-2026-62335 NONE OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1…
- CVE-2026-62333 NONE OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1…
- CVE-2026-62301 NONE MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video access does not enforce the visitor role's intended…
- CVE-2026-61694 LOW · 3.7 go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified by the advisory, `ParseMPTAmountBinary` in `internal/ledger/state/ripple_state.go`…
- CVE-2026-61850 NONE Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the `project-scoped RBAC API` let…
- CVE-2026-61618 NONE SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without consistently enforcing canonical limb bounds before elliptic-curve coordinate…
- CVE-2026-55493 MEDIUM · 6.5 HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks whether a comment is visible to the searching user but fails to…
- CVE-2026-119337 HIGH · 7.1 RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes completion_openai and returns through the openai-compatible branch before UserCanvasService.accessible() checks…
- CVE-2026-119730 MEDIUM · 4.3 Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack…
- CVE-2026-119335 HIGH · 7.8 Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID() attempts to validate the…
- CVE-2026-119332 HIGH · 8.8 Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup() in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from m_records, retained an iterator to the next…
- CVE-2026-119328 MEDIUM · 6.5 Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthenticated machine-learning /predict endpoint in machine-learning/immich_ml/main.py accepted an options object and…
- CVE-2026-119330 LOW · 3.5 Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation API accepted albumId and assetIds as independent fields in…
- CVE-2026-116250 MEDIUM · 6.5 In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() and then opened it by…
- CVE-2026-116249 HIGH · 8.4 In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory,…
- CVE-2026-116252 MEDIUM · 6.5 pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" (or a postgresql://… Pgadmin
- CVE-2026-116251 MEDIUM · 4.2 pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own change password dialog or through an administrator… Pgadmin
- CVE-2026-116248 MEDIUM · 6.8 In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Shared switch only to…
- CVE-2026-116247 HIGH · 8.2 When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one could not be found, pgAdmin… Pgadmin
- CVE-2026-116246 MEDIUM · 6.5 To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own… Pgadmin
- CVE-2026-116245 HIGH · 8.2 libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry there can hold a password… Pgadmin
- CVE-2026-116244 HIGH · 8.2 When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the Kerberos library… Pgadmin
- CVE-2026-116243 HIGH · 7.5 pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode the binary path was… Pgadmin
- CVE-2026-116242 HIGH · 8.2 pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it always loaded the unencrypted private keys in… Pgadmin
- CVE-2026-116241 CRITICAL · 9.9 pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql copy (...) TO command and checks that the query's parentheses are balanced… Pgadmin
- CVE-2026-116240 MEDIUM · 6.5 In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the absolute path with get_abs_path(). Several callers then… Pgadmin
- CVE-2026-116239 HIGH · 8.5 In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal account and an… Pgadmin
- CVE-2026-116238 HIGH · 8.1 In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be bypassed, giving an unauthenticated attacker…
- CVE-2026-115830 NONE In Secret Server on-prem versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.
- CVE-2026-115829 NONE In Secret Server on-prem versions earlier than 12.3.1, a user could cause a two-factor pin code to be generated for any account without prior authentication,…
- CVE-2026-115828 NONE In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device
- CVE-2026-7003 MEDIUM · 5.3 WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values embedded in JavaScript…
- CVE-2026-73322 MEDIUM · 6.5 Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the table…
- CVE-2026-62264 HIGH · 7.5 PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the…
- CVE-2026-61848 NONE Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass parses input containing `non-ASCII…
- CVE-2026-61846 NONE Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses `CSS simple blocks…
- CVE-2026-61586 NONE Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0.1.2, Copernik XML Factory does not block XInclude resource resolution on the stock…
- CVE-2026-46560 HIGH · 7.5 Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module opens an unconnected datagram socket and trusts the first…
- CVE-2026-120046 MEDIUM · 5.3 Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers…
- CVE-2026-119842 MEDIUM · 6.5 A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing…
- CVE-2026-119729 MEDIUM · 6.5 A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash…
- CVE-2026-119728 MEDIUM · 6.5 A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file or network stream with malformed Multiview…
- CVE-2026-119727 MEDIUM · 6.5 A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding (SCC) extension with…
- CVE-2026-69446 MEDIUM · 4.4 Onjuiste autorisatie in Microsoft Edge (op Chroom gebaseerd) stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen. Microsoft