Export limit exceeded: 405311 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 405311 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (405311 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-89111 | 1 Sap Se | 1 Sap Cloud | 2026-10-13 | 10 Critical |
| The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated. | ||||
| CVE-2026-89113 | 1 Sap Se | 1 Sap Commerce Cloud (ootb Code) | 2026-10-13 | 8.8 High |
| SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL commands. Successful exploitation could allow the user to read, modify or delete sensitive data from the application's database, resulting in a high impact on confidentiality, integrity and availability of the application. | ||||
| CVE-2026-89116 | 1 Sap Se | 1 Sap Yeoman-ui | 2026-10-13 | 5.9 Medium |
| The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installationLocation VS Code workspace configuration value. Because the value was passed directly to the shell without sanitisation, a malicious workspace repository could craft a settings.json that injects OS commands when a developer opens the project and triggers a generator installation. | ||||
| CVE-2026-89121 | 1 Sap Se | 1 Sap S/4hana (linear Asset Management Rap Business Object) | 2026-10-13 | 4.7 Medium |
| SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not authorized for. This results in a high impact on integrity. There is no impact on confidentiality and availability. | ||||
| CVE-2026-89124 | 1 Sap Se | 1 Sap Hana (display Product Catalog Based On Customs Declaration) | 2026-10-13 | 4.3 Medium |
| Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application. | ||||
| CVE-2026-109758 | 1 Perforce | 1 Helix Authentication Service | 2026-10-13 | N/A |
| Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In version 25.2, the installation templates contain a default credential which the installer copies into the active configuration; the installer and configuration script do not automatically replace that value with a random token. An attacker who knows the default token can authenticate to the SCIM API and perform user and group operations allowed by the configured provisioning backend. This issue can be chained with CVE-2026-61834 in affected releases of the scim-patch dependency. A crafted SCIM PATCH request can cause server-side prototype pollution, corrupt application state, and disrupt service availability, including health checks and SCIM or SSO requests. In a later test, this primitive was confirmed to enable remote code execution in a Node.js 24/Express deployment through available gadget chains involving child_process, EJS/Pug, or Passport. This vulnerability exists in version 2022.1 - 2025.2 of HAS however the underlying defect was removed in version 2026.1 which was released July 17th 2026. The vulnerability was identified in older versions of HAS after version 2026.1 was released. | ||||
| CVE-2026-67165 | 2026-10-13 | 5.4 Medium | ||
| HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may allow the attacker steal cookie-based authentication credentials and comprise user's account then launch other attacks. | ||||
| CVE-2026-66588 | 2 Dream-theme, Wordpress-extensions | 2 The7, The7 | 2026-10-13 | N/A |
| This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive. | ||||
| CVE-2026-106139 | 1 Progress | 1 Kendo Ui For Vue | 2026-10-13 | 5.4 Medium |
| In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a string value bound to the chart can supply HTML containing event handlers that execute JavaScript in a user's browser when the user hovers over the affected data point. Successful exploitation can compromise the confidentiality and integrity of data accessible to the affected application. | ||||
| CVE-2026-109107 | 1 Wavlink | 1 Wl-wn592ax6 | 2026-10-13 | 6.5 Medium |
| A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure. | ||||
| CVE-2026-85947 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 9.9 Critical |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attacker with forest-management privileges could exploit this flaw to create a persistent unauthorized administrator account, potentially resulting in complete unauthorized administrative control of the server. | ||||
| CVE-2026-85948 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 9.9 Critical |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with manage-user-level privileges could exploit this flaw to obtain persistent unauthorized administrative control. | ||||
| CVE-2026-85950 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 8.4 High |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privileges to access authentication material associated with higher-privileged users, potentially resulting in unauthorized administrative access. | ||||
| CVE-2026-85951 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 8.5 High |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials or tokens. | ||||
| CVE-2026-85952 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 8.5 High |
| Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials. | ||||
| CVE-2026-85953 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 8.5 High |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution under an unintended identity. | ||||
| CVE-2026-85954 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 8.6 High |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an elevated security context, which could result in privilege escalation beyond the attacker's granted permissions. | ||||
| CVE-2026-85955 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 9.9 Critical |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions. | ||||
| CVE-2026-85956 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 9.6 Critical |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data. | ||||
| CVE-2026-85958 | 1 Progress Software Corporation | 1 Marklogic Server | 2026-10-13 | 7.5 High |
| Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access. | ||||