Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,123 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-76184 | 8.2 High | In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than… | Oct 15, 2026 |
| CVE-2026-104618 | 6.9 Medium | sdbootutil: world-readable debug log | Oct 15, 2026 |
| CVE-2026-76182 | 6.9 Medium | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are… | Oct 15, 2026 |
| CVE-2026-104617 | 5.9 Medium | sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline | Oct 15, 2026 |
| CVE-2026-16438 | 9.4 Critical | An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64 | Oct 15, 2026 |
| CVE-2026-16437 | 7.1 High | An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz | Oct 15, 2026 |
| CVE-2026-72528 | 5.1 Medium | "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result,… | Oct 15, 2026 |
| CVE-2026-16436 | 9.2 Critical | An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz | Oct 15, 2026 |
| CVE-2026-75559 | 6.9 Medium | The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration… | Oct 15, 2026 |
| CVE-2026-102477 | 8.7 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in bytes, however the maximum size applies to the received bytes. When… | Oct 15, 2026 |
| CVE-2026-102464 | 8.2 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound QoS 2 PUBLISH message received from the broker in an internal map… | Oct 15, 2026 |
| CVE-2026-96614 | 5.1 Medium | "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to… | Oct 15, 2026 |
| CVE-2026-105271 | 5.1 Medium | "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application. | Oct 15, 2026 |
| CVE-2026-102461 | 8.7 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated… | Oct 15, 2026 |
| CVE-2023-32198 | 8.0 High | Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks | Oct 15, 2026 |
| CVE-2026-103224 | 8.2 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A… | Oct 15, 2026 |
| CVE-2024-22031 | 8.5 High | Rancher users who can create Projects can gain access to arbitrary projects | Oct 15, 2026 |
| CVE-2026-103223 | 8.2 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A… | Oct 15, 2026 |
| CVE-2025-23390 | 6.3 Medium | Fleet doesn’t validate a server’s certificate when connecting through SSH | Oct 15, 2026 |
| CVE-2026-102466 | 8.2 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no… | Oct 15, 2026 |
| CVE-2026-102463 | 8.2 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecodeArray) allocates a Java array sized by a server-declared 32-bit… | Oct 15, 2026 |
| CVE-2026-109855 | 7.5 High | undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake | Oct 15, 2026 |
| CVE-2026-102469 | 9.2 Critical | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a… | Oct 15, 2026 |
| CVE-2026-102462 | 8.2 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer… | Oct 15, 2026 |
| CVE-2026-108092 | 4.3 Medium | Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure | Oct 15, 2026 |
| CVE-2026-102465 | 8.2 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or… | Oct 15, 2026 |
| CVE-2026-102475 | 8.7 High | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered bytes limit to ensure a bounded buffer for each request. This can be used to… | Oct 15, 2026 |
| CVE-2026-102467 | 8.7 High | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to… | Oct 15, 2026 |
| CVE-2026-101311 | 7.0 High | Multiple vulnerabilities in bhyve device models | Oct 15, 2026 |
| CVE-2026-101310 | 7.0 High | Multiple vulnerabilities in bhyve device models | Oct 15, 2026 |
| CVE-2026-101309 | 7.0 High | Multiple vulnerabilities in bhyve device models | Oct 15, 2026 |
| CVE-2026-101308 | 5.5 Medium | TOCTOU race between sound(4) buffer resizing and mmap | Oct 15, 2026 |
| CVE-2026-101307 | 8.2 High | Remotely triggerable buffer overflow in tcp_rack | Oct 15, 2026 |
| CVE-2026-19377 | 6.0 Medium | Improper certificate validation in Cato Client tunnel handshake | Oct 15, 2026 |
| CVE-2026-41544 | 8.7 High | Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint | Oct 15, 2026 |
| CVE-2026-39993 | 8.7 High | Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter | Oct 15, 2026 |
| CVE-2026-24723 | 5.3 Medium | NULL Pointer Dereference in utilRequest.cgi | Oct 15, 2026 |
| CVE-2026-24722 | 5.3 Medium | Null Pointer Dereference in File Station 5 | Oct 15, 2026 |
| CVE-2026-24721 | 5.3 Medium | Null Pointer Dereference in File Station 5 | Oct 15, 2026 |
| CVE-2026-24718 | 5.3 Medium | Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi | Oct 15, 2026 |
| CVE-2026-101303 | 7.5 High | IPv6 UDP sendto(2) bypasses jail loopback restriction | Oct 15, 2026 |
| CVE-2026-24715 | 5.3 Medium | Lack of Reproducible Vulnerability Evidence in QNAP Report | Oct 15, 2026 |
| CVE-2026-22896 | 6.2 Medium | Stored XSS via Interface Name in Network & Virtual Switch App | Oct 15, 2026 |
| CVE-2025-68404 | 7.5 High | vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface | Oct 15, 2026 |
| CVE-2025-68403 | 4.6 Medium | Inadequate Steps to Confirm Vulnerability in QuRouter | Oct 15, 2026 |
| CVE-2025-66275 | 7.7 High | Remote code execution via command injection | Oct 15, 2026 |
| CVE-2025-66272 | 7.7 High | Arbitrary file deletion and remote code execution | Oct 15, 2026 |
| CVE-2025-29897 | 2.3 Low | Stack-based Buffer Overflow in qsyncsrv.cgi | Oct 15, 2026 |
| CVE-2025-29896 | 2.3 Low | NULL Pointer Dereference in qsyncsrv.cgi | Oct 15, 2026 |
| CVE-2025-29895 | 2.3 Low | NULL Pointer Dereference in qsyncsrv.cgi | Oct 15, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.