CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-88812 HIGH · 7.8 A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash…
- CVE-2026-87086 HIGH · 7.5 Tanium addressed a denial of service vulnerability in Provision.
- CVE-2026-87085 MEDIUM · 6.3 Tanium addressed a SQL injection vulnerability in Provision.
- CVE-2026-16491 MEDIUM · 6.5 Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings. A user with dashboard permission-management…
- CVE-2026-118132 MEDIUM · 6.1 NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content.…
- CVE-2026-118131 CRITICAL · 9.8 GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:ProgramData directory allows members of the BUILTINUsers…
- CVE-2026-117526 MEDIUM · 5.3 A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the…
- CVE-2026-116662 HIGH · 7.5 Tanium addressed a compression bomb vulnerability in Enforce.
- CVE-2026-116680 MEDIUM · 6.4 HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled…
- CVE-2026-116676 HIGH · 8.8 Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace…
- CVE-2026-116660 MEDIUM · 4.3 Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-116659 MEDIUM · 4.3 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-116658 MEDIUM · 6.5 Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116657 MEDIUM · 5.3 Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116656 HIGH · 7.5 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-116649 HIGH · 7.1 Tanium addressed an improper output sanitization vulnerability in Enforce.
- CVE-2026-116647 HIGH · 7.1 Tanium heeft een onjuiste kwetsbaarheid voor ontsmetting van de uitvoer aangepakt in Comply.
- CVE-2026-108333 LOW · 2.5 Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
- CVE-2026-108332 MEDIUM · 6.3 Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
- CVE-2026-108331 LOW · 3.3 Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
- CVE-2026-108330 LOW · 3.6 Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
- CVE-2026-108329 HIGH · 8.8 Tanium addressed an unauthorized code execution vulnerability in Threat Response.
- CVE-2026-108328 MEDIUM · 4.2 Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
- CVE-2026-108326 MEDIUM · 6.5 Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
- CVE-2026-108325 MEDIUM · 6.6 Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
- CVE-2026-108316 MEDIUM · 4.3 Tanium addressed an information disclosure vulnerability in Tanium Server.
- CVE-2026-108313 MEDIUM · 6.6 Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
- CVE-2026-108311 LOW · 2.7 Tanium addressed an insufficient logging vulnerability in Tanium Server.
- CVE-2026-108310 MEDIUM · 5.3 Tanium addressed a denial of service vulnerability in Tanium Server.
- CVE-2026-108309 MEDIUM · 5.5 Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
- CVE-2026-108308 MEDIUM · 6.5 Tanium addressed a SQL injection vulnerability in Patch.
- CVE-2026-108307 HIGH · 7.8 Tanium addressed a heap-based buffer overflow vulnerability in Index.
- CVE-2026-108306 HIGH · 7.8 Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
- CVE-2026-108305 HIGH · 7.8 Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
- CVE-2026-108304 HIGH · 7.8 Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
- CVE-2026-108303 HIGH · 8.8 Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
- CVE-2026-108302 MEDIUM · 4.3 Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-108301 MEDIUM · 6.0 Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-102816 NONE An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify…
- CVE-2026-102813 NONE An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to…
- CVE-2026-102812 NONE A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization…
- CVE-2026-87897 MEDIUM · 4.6 A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low…
- CVE-2026-82986 MEDIUM · 4.6 The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though…
- CVE-2026-82984 MEDIUM · 4.3 When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of…
- CVE-2026-82983 LOW · 3.3 The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list…
- CVE-2026-77173 MEDIUM · 4.3 A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and…
- CVE-2026-77172 MEDIUM · 5.3 App passwords were allowed to bypass password confirmation on sensitive endpoints.
- CVE-2026-77171 LOW · 3.5 A public shared collective always allowed recipients of the link to create pages.
- CVE-2026-77167 HIGH · 7.5 Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic…
- CVE-2026-67400 LOW · 3.5 A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.