CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-91403 CRITICAL · 9.1 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are…
- CVE-2026-114508 MEDIUM · 6.5 Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation…
- CVE-2026-114384 MEDIUM · 6.3 A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of…
- CVE-2026-114381 MEDIUM · 6.3 A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation…
- CVE-2026-96643 NONE Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte…
- CVE-2026-96637 NONE Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A…
- CVE-2026-114406 MEDIUM · 6.8 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate…
- CVE-2026-114378 MEDIUM · 6.3 A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument…
- CVE-2026-114145 HIGH · 7.5 GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, create_submodule() in git/objects/submodule/base.py accepts an attacker-influenced submodule path such as .git/hooks…
- CVE-2026-114141 NONE toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() function in lib/compiler.js rescans the complete assignedPaths and…
- CVE-2026-114137 HIGH · 7.4 Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses the proxy's user-id pk while the concrete…
- CVE-2026-85518 MEDIUM · 6.1 A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to…
- CVE-2026-114375 MEDIUM · 6.3 A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files…
- CVE-2026-112381 MEDIUM · 5.9 Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response…
- CVE-2026-111817 MEDIUM · 5.3 Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed (proxy.config.http.drop_chunked_trailers) until the connection times out, because it waits…
- CVE-2026-111815 CRITICAL · 10.0 Apache Traffic Server kan een TLS-sessie over SNI virtuele hosts hervatten zonder een clientcertificaat opnieuw te verifiëren dat vereist is door het STRENGE beleid van…
- CVE-2026-111814 CRITICAL · 10.0 Het standaardbeleid voor het delen van uitgaande sessies van Apache Traffic Server kan een samengevoegde TLS-sessie die is geverifieerd met één clientcertificaat opnieuw gebruiken voor…
- CVE-2026-111812 CRITICAL · 10.0 Met de origin_server_auth-plug-in van Apache Traffic Server kan een client de ondertekening van door de aanvaller gekozen AWS-aanvraagheaders forceren onder de eigen referenties van de…
- CVE-2026-111811 CRITICAL · 9.0 De experimentele tsmemcache-plug-in van Apache Traffic Server maakt niet-geverifieerde netwerklezen, schrijven en verwijderen van de gedeelde proxycache mogelijk. Dit probleem heeft invloed op Apache Traffic…
- CVE-2026-111810 HIGH · 7.5 Apache Traffic Server 9.2.15, 10.1.4 en 10.2.0 schrijven één unthrottled diagnostische logregel voor elke interne @ header die ze strippen, dus een verzoek met veel…
- CVE-2026-111808 HIGH · 8.6 Apache Traffic Server kan worden gebruikt om de werknemerspool van een HTTP/1.1-oorsprong uit te putten via een misvormd opgevuld HTTP/2-dataframe. Dit probleem heeft invloed op…
- CVE-2026-111805 HIGH · 8.6 Apache Traffic Server kan worden gebruikt om de werknemerspool van een HTTP/1.1-oorsprong uit te putten via een afgekorte HTTP/2-inhoudslengtewaarde. Dit probleem heeft invloed op Apache…
- CVE-2026-79976 HIGH · 7.1 The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file, where the bus controller first writes a register number and then writes or reads…
- CVE-2026-78119 MEDIUM · 6.3 The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (drivers/espi/espi_npcx.c), taking the 12-bit length field directly out of the request header in the…
- CVE-2026-78118 HIGH · 7.0 The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it was called from several places without holding…
- CVE-2026-78117 MEDIUM · 4.2 The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cy_stc_ble_hci_tx_packet_info_t hci_tx_pkt. psoc6_bless_send() cleared and…
- CVE-2026-78116 MEDIUM · 5.2 The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work_handler() (drivers/sensor/broadcom/afbr_s50/afbr_s50.c), a non-STATUS_OK return from Argus_EvaluateData() calls handle_error_on_result(),…
- CVE-2026-19947 MEDIUM · 5.3 The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and devmux_select_set(). When CONFIG_USERSPACE is enabled, their user-mode verifiers z_vrfy_devmux_select_get() and z_vrfy_devmux_select_set() forwarded directly…
- CVE-2026-19676 HIGH · 7.8 The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, checked only the device object permission and copied the caller-supplied struct peci_msg with k_usermode_from_copy().…
- CVE-2026-18748 LOW · 3.5 The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field plus a fixed 8-byte codec_ie[] array. When…
- CVE-2026-114361 MEDIUM · 5.6 A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a…
- CVE-2026-114266 MEDIUM · 6.3 A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The manipulation of…
- CVE-2026-113461 NONE Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in…
- CVE-2026-111816 CRITICAL · 9.3 Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection…
- CVE-2026-111813 CRITICAL · 10.0 Met de experimentele magick-plug-in van Apache Traffic Server kan een niet-geverifieerde client de ImageMagick-argumenten converteren in de standaard (niet-ondertekende) configuratie. Dit probleem heeft invloed op…
- CVE-2026-111804 HIGH · 8.2 Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This…
- CVE-2026-105945 NONE The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package…
- CVE-2026-105944 NONE Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and it can be configured…
- CVE-2026-105942 NONE When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broker is designed to authorize…
- CVE-2026-105938 NONE Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication mode, which requires a subscription name to start…
- CVE-2026-105937 NONE Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed ledger. The source topic is…
- CVE-2026-105936 NONE The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors…
- CVE-2026-105935 NONE The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input…
- CVE-2026-105934 NONE The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/persistent/{tenant}/{namespace}/{topic}/truncate). Truncating a topic moves all subscription cursors of the…
- CVE-2026-105933 NONE Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting the encryption_required namespace policy. When this policy…
- CVE-2026-105932 NONE The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a topic. For persistent topics…
- CVE-2025-55702 HIGH · 8.7 When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread body left…
- CVE-2025-31699 HIGH · 8.9 Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared…
- CVE-2026-92209 HIGH · 7.8 NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first…
- CVE-2026-92208 HIGH · 8.8 NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is…