Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,123 vulnerabilities match.

CVESeveritySummary
CVE-2026-1003537.5 Highkin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
CVE-2026-1003547.5 Highkin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash
CVE-2026-1003527.5 Highkin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path
CVE-2026-1003517.4 Highkin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion
CVE-2026-1003498.2 Highkin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content
CVE-2026-1003505.3 Mediumkin-openapi deepObject query decoding repeatedly compiles an invariant regular expression
CVE-2026-929828.5 HighAnsible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
CVE-2026-1003475.3 Mediumkin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path
CVE-2026-977128.7 HighNexus Repository 3 - Privilege Escalation via Role Management
CVE-2026-976675.1 MediumNexus Repository 3 - Stored Cross-Site Scripting in Browse UI
CVE-2026-976666.9 MediumNexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint
CVE-2026-976657.1 HighNexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload
CVE-2026-1003485.3 Mediumkin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)
CVE-2026-11095810.0 CriticalWavlink WN530HG4B api.cgi heap-based overflow
CVE-2026-1110966.7 MediumIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible
CVE-2026-1110958.0 HighIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible
CVE-2026-1110948.1 HighIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible
CVE-2026-1110937.5 HighIn JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files
CVE-2026-1110926.5 MediumIn JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands
CVE-2026-1110917.8 HighIn JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration
CVE-2026-973947.5 Highkin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items
CVE-2026-1054749.4 CriticalA server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.
CVE-2026-454528.3 HighUnitronics - CWE-134 Use of Externally-Controlled format string
CVE-2026-714907.1 HighOPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection
CVE-2026-454518.3 HighUnitronics - CWE-287: Improper Authentication
CVE-2026-634428.1 HighOPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking
CVE-2026-454508.3 HighUnitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2026-583908.0 HighOPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views
CVE-2026-583945.2 MediumOPNsense: Stored XSS in Administration Settings via Certificate Description
CVE-2026-1094498.7 HighSymfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process
CVE-2026-454498.3 HighUnitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-583925.4 MediumOPNsense: Stored XSS in Services: NTP GPS
CVE-2026-583954.3 MediumOPNsense: XPath injection in MVC safe-delete
CVE-2026-583935.9 MediumOPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files
CVE-2026-571559.9 CriticalOPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
CVE-2026-583915.4 MediumOPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout
CVE-2026-535827.1 HighOPNsense: XPATH Injection can disclose any secret in config.xml
CVE-2026-755056.0 MediumEspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment
CVE-2026-774606.5 MediumEspoCRM: Mass email template renderer leaks restricted record fields
CVE-2026-1094138.7 HighSymfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
CVE-2026-631305.5 MediumEspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete
CVE-2026-798436.5 MediumHPE NonStop SQL/MX EXE - out-of-bounds read vulnerability
CVE-2026-599944.3 MediumEspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received
CVE-2026-551545.4 MediumEspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export
CVE-2026-551843.5 LowEspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled
CVE-2026-535752.7 LowEspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user
CVE-2026-1080828.7 HighSymfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
CVE-2026-535747.6 HighEspoCRM: Blind SQL injection via streamAttachments where-clause complex expression
CVE-2026-11095710.0 CriticalWavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection
CVE-2026-466916.5 MediumEspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.