CVE-database
78.857 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-19592 NONE OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor…
- CVE-2026-19591 NONE OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser…
- CVE-2026-19590 NONE OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user…
- CVE-2024-7953 NONE A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a…
- CVE-2024-7952 NONE A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be…
- CVE-2026-58566 HIGH · 8.8 Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- CVE-2026-51956 NONE A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user from one tenant can read and modify another…
- CVE-2026-51934 NONE Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via the fromSetCmdlineRun function
- CVE-2026-51788 NONE An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the accounts/models.py component
- CVE-2026-84270 MEDIUM · 4.3 A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data…
- CVE-2026-84269 MEDIUM · 6.5 A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to…
- CVE-2026-84268 HIGH · 8.8 A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply()…
- CVE-2026-84267 MEDIUM · 4.3 A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer…
- CVE-2026-84232 MEDIUM · 5.4 A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type (e.g., text/html for…
- CVE-2026-84207 MEDIUM · 5.4 Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers…
- CVE-2026-84206 MEDIUM · 4.3 Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without delete rights to restore soft-deleted assets.…
- CVE-2026-84205 MEDIUM · 6.5 GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identified by the…
- CVE-2026-84204 MEDIUM · 6.5 GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions. Authenticated attackers can retrieve attachment metadata from…
- CVE-2026-84203 HIGH · 8.1 Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with…
- CVE-2026-84202 HIGH · 8.8 ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories…
- CVE-2026-84201 HIGH · 7.1 appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the intended PROJECT_ROOT…
- CVE-2026-84153 MEDIUM · 6.3 A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation…
- CVE-2026-79687 CRITICAL · 9.0 Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem…
- CVE-2026-79682 HIGH · 8.8 Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
- CVE-2026-61779 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61778 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61777 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61776 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61775 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61774 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61773 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61772 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61771 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61770 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61769 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61768 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61767 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61766 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61765 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61764 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61763 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61762 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61761 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61760 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61759 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61758 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61757 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61756 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61755 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…
- CVE-2026-61754 HIGH · 7.8 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to…