Export limit exceeded: 376530 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 376530 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (376530 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-67286 | 2026-08-12 | N/A | ||
| Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name. | ||||
| CVE-2026-66384 | 1 Jfrog | 1 Artifactory | 2026-08-12 | 5.3 Medium |
| An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. | ||||
| CVE-2026-66381 | 1 Jfrog | 1 Artifactory | 2026-08-12 | 5.3 Medium |
| A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions. | ||||
| CVE-2026-66375 | 1 Jfrog | 1 Artifactory | 2026-08-12 | 8.1 High |
| A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions. | ||||
| CVE-2026-66016 | 2026-08-12 | 6.7 Medium | ||
| Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users. | ||||
| CVE-2026-65926 | 1 Jfrog | 1 Artifactory | 2026-08-12 | 3.1 Low |
| An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known. | ||||
| CVE-2026-55576 | 1 Maaassistantarknights | 1 Maaassistantarknights | 2026-08-12 | N/A |
| MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/release-preparation.yml inlined attacker-controlled github.event.pull_request.title into a run: shell command during the pull_request opened, reopened, and ready_for_review events, so a non-draft fork PR whose title starts with Release v could execute shell commands on the ubuntu-latest runner during the generate-changelog job. This vulnerability is fixed by commit cafc3946059e6337d2089d4fec8b6885ba17c332. | ||||
| CVE-2026-51584 | 1 Usememos | 1 Memos | 2026-08-12 | 9.8 Critical |
| An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/auth_service.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject claim. | ||||
| CVE-2026-51583 | 1 Usememos | 1 Memos | 2026-08-12 | 8.5 High |
| An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address. | ||||
| CVE-2026-48550 | 2026-08-12 | 6.1 Medium | ||
| Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker can craft a malicious link that, when followed by an authenticated user, executes arbitrary JavaScript in the victim's browser. | ||||
| CVE-2026-20795 | 2026-08-12 | N/A | ||
| Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. | ||||
| CVE-2026-20787 | 2026-08-12 | N/A | ||
| Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. | ||||
| CVE-2026-19539 | 1 Roskus | 1 Prospero Flow Crm | 2026-08-12 | N/A |
| Authorization Bypass Through User-Controlled Key in the ticket management component in Roskus Prospero Flow CRM before 5.4.9 allows authenticated users of any company to read the full content (title, description, and attachments) of tickets belonging to another company, to hijack another company's tickets by reassigning their company_id, and to delete another company's tickets without any authorization check, via the ticket's numeric identifier, because the read and save operations retrieve the record without constraining the query to the authenticated user's company, and the delete controller type-hints a generic Illuminate\Http\Request instead of the TicketDeleteRequest that would enforce the required permission. | ||||
| CVE-2026-19434 | 1 Maalfer | 1 Pentestify | 2026-08-12 | N/A |
| Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when rendering the report. | ||||
| CVE-2026-19425 | 1 Win Men Intermational | 1 Travel Agency Management System | 2026-08-12 | 9.8 Critical |
| Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents. | ||||
| CVE-2026-19424 | 1 Inventec Appliances | 1 Chiline Cloud | 2026-08-12 | 7.5 High |
| Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data. | ||||
| CVE-2026-18635 | 1 Rapid7 | 1 Velociraptor | 2026-08-12 | 7.2 High |
| Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor versions prior to 0.77.2 evaluate this permission against the caller's org instead of against the target org. This allows an administrator in one org to impersonate another user in another org, in which they may not have the IMPERSONATE permission. | ||||
| CVE-2026-18235 | 1 Ibm | 1 I | 2026-08-12 | 8.3 High |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation. | ||||
| CVE-2026-17268 | 1 Ibm | 1 I | 2026-08-12 | 6.8 Medium |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token. | ||||
| CVE-2026-16999 | 2026-08-12 | 6.3 Medium | ||
| Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17. | ||||