Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,435 vulnerabilities match.

CVESeveritySummary
CVE-2026-1168942.3 LowREDAXO before 5.21.5 Insufficient Session Expiration on Password Change
CVE-2026-1168936.1 MediumREDAXO core before 5.21.5 Missing Authorization in rex_api_package API
CVE-2026-1174668.6 HighIn affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.
CVE-2026-1173417.7 HighIn affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is linked to a space, a user in that space with appropriate permissions could read the code from the…
CVE-2026-1168708.7 HighIn affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued from a suitably configured non legitimate issuer being accepted as a token belonging to a service…
CVE-2026-1107372.3 LowPush Endpoint Returns Permissive CORS Headers
CVE-2026-1168925.3 MediumSemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile
CVE-2026-1168915.1 MediumSemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate
CVE-2026-1168906.9 MediumSemantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API
CVE-2026-1168895.3 MediumSemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property
CVE-2026-1168884.8 MediumSemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading
CVE-2026-1168875.3 MediumSemantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property
CVE-2026-1168865.3 MediumSemantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse
CVE-2026-1168855.3 MediumSemantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter
CVE-2026-1168845.3 MediumSemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes
CVE-2026-1168834.8 MediumSemantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions
CVE-2026-1168824.8 MediumSemantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels
CVE-2026-1168815.3 MediumSemantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete
CVE-2026-1168807.1 HighSemantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions
CVE-2026-1168796.9 MediumSemantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task
CVE-2026-1168788.7 HighSemantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity
CVE-2026-1168778.7 HighSemantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event
CVE-2026-1168767.1 HighSemantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected
CVE-2026-1168755.3 MediumSemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters
CVE-2026-1168745.3 MediumSemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter
CVE-2026-1168736.9 MediumSemantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update
CVE-2026-1168728.7 HighSemantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters
CVE-2026-1168718.7 HighSemantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask
CVE-2026-1175306.7 MediumIn JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands
CVE-2026-1115485.3 MediumA stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied…
CVE-2026-821179.8 CriticalAuthentication Bypass by Spoofing Vulnerability in HiRDB
CVE-2026-821169.8 CriticalMissing Authentication for Critical Function Vulnerability in HiRDB
CVE-2026-821189.8 CriticalStack-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-821209.8 CriticalHeap-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-821199.8 CriticalOS Command Injection Vulnerability in HiRDB
CVE-2026-821217.5 HighOrigin Validation Error Vulnerability in HiRDB
CVE-2026-821229.4 CriticalStack-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-769399.8 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769369.4 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769379.4 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769389.8 CriticalAuthentication Bypass Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769359.4 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769349.8 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769329.4 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769339.4 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-865779.4 CriticalOut-of-bounds Write Vulnerability in JP1 Products
CVE-2026-865769.4 CriticalHeap-based Buffer Overflow Vulnerability in JP1 Products
CVE-2026-865759.4 CriticalStack-based Buffer Overflow Vulnerability in JP1 Products
CVE-2026-865749.8 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Base
CVE-2026-1071476.3 MediumAuthentication bypass by spoofing in twofactor_gauthenticator

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.