Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,123 vulnerabilities match.

CVESeveritySummary
CVE-2026-1094615.9 MediumMicrosoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
CVE-2026-1095889.3 CriticalNumeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel
CVE-2026-1095879.3 CriticalIncorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel
CVE-2026-599626.5 MediumTandoor Recipes: ORM ORDER BY Injection via FK Traversal in Tandoor Recipes
CVE-2026-599675.4 MediumTandoor Recipes: Cross-user IDOR in /api/recipe-from-source/ bookmarklet import — read and destroy another space member's pending BookmarkletImport
CVE-2026-498689.8 CriticalRIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read
CVE-2026-1026939.6 CriticalRIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID
CVE-2026-1026929.1 CriticalRIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access
CVE-2026-623624.9 MediumPeerBanHelper: SQL injection via ${field} interpolation in MyBatis mapper for analysis endpoint
CVE-2026-860477.7 HighMariaDB: Insufficient quoting in mariadb-dump and SHOW commands
CVE-2026-857454.3 MediumMariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
CVE-2026-857489.9 CriticalMariaDB: Use-after-free with a large number of SYS_REFCURSOR's
CVE-2026-857469.9 CriticalMariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
CVE-2026-922629.9 CriticalMariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
CVE-2026-973808.8 HighMariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
CVE-2026-859855.4 MediumMariaDB: Unauthorized file access via CONNECT engine UDFs
CVE-2026-860098.2 HighMailu: Domain managers can allow themselves to spoof on other hosted domains they should not control
CVE-2026-860087.2 HighMailu domain managers can take over higher-privileged accounts
CVE-2026-571699.6 CriticalDockhand: Unauthenticated container exec via WebSocket upgrade
CVE-2026-774747.1 Highdcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open
CVE-2026-449779.0 Criticalcountly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context
CVE-2026-415827.5 Highcountly-server: Unauthenticated Path Traversal via Public Image and Screenshot Routes Leads to Read Internal Files
CVE-2026-422707.5 Highcountly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception
CVE-2026-422698.1 Highcountly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletion
CVE-2026-1029235.4 MediumSparkyFitness: SSRF via unvalidated custom_url in AI service settings
CVE-2026-922637.2 HighSparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore
CVE-2026-689068.7 HighlibIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU
CVE-2026-689078.2 HighlibIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments
CVE-2026-689085.3 MediumlibIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path
CVE-2026-574465.3 MediumlibIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle
CVE-2026-487417.5 HighlibIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS
CVE-2026-485037.5 HighlibIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead
CVE-2026-1115813.3 LowLibblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method
CVE-2026-1029417.5 Highgomarkdown/markdown IsSafeURL panics on short URLs
CVE-2026-776307.5 Highpupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
CVE-2026-964255.5 MediumIncorrect Permission Assignment for Critical Resource in lomiri-download-manager
CVE-2026-964247.8 HighIncorrect Permission Assignment for Critical Resource in lomiri-download-manager
CVE-2026-574887.1 Highpupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling
CVE-2026-574877.5 Highlibupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered
CVE-2026-574867.5 Highpupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
CVE-2026-558626.5 Mediumpupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow
CVE-2026-574474.3 MediumDiscourse Doc Categories: Doc category index refresh leaks private topic titles
CVE-2026-555438.5 HighTuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file
CVE-2026-558366.8 MediumOpen Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad)
CVE-2026-546576.5 MediumOpen Zaak: /zaken/_zoek and /enkelvoudiginformatieobjecten/_zoek endpoints do not filter result lists based on authorizations linked to token
CVE-2026-958598.7 Highlibp2p-rust: Gossipsub GRAFT topics unbounded growth
CVE-2026-1117285.3 MediumSeanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings
CVE-2026-1077777.1 HighThermo Fisher Torrent Suite Software Path Traversal
CVE-2026-1056678.7 HighJ4Care dcm4che Missing Authentication for Critical Function
CVE-2026-1052799.3 CriticalJ4Care dcm4che Missing Authentication for Critical Function

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.