Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,638 vulnerabilities match.

CVESeveritySummary
CVE-2026-1161106.9 MediumGiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication
CVE-2026-1161095.3 Mediumcontinuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
CVE-2026-1161085.3 Mediumopenbq-org OpenBB Local API Server api_settings.py access control
CVE-2026-1161075.3 MediumDatafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorization
CVE-2026-1161066.9 MediumHeyCyan App FileProvider access control
CVE-2026-1161056.3 MediumHeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission
CVE-2026-1161045.3 MediumSony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection
CVE-2026-1161035.3 MediumSony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection
CVE-2026-1161025.3 MediumQuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection
CVE-2026-1161015.3 Mediumitsourcecode Online Cake Ordering System deletetransac.php sql injection
CVE-2026-1161004.8 Mediumgougucms User Level Level.php add cross site scripting
CVE-2026-36698Not scoredXovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh. The script processes symlinks from uploaded parameter archive files and…
CVE-2026-311589.8 CriticalSQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page
CVE-2026-1166387.5 HighThe Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a…
CVE-2026-1070929.8 CriticalNexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.
CVE-2026-1070917.8 HighAn issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer DLL-loading logic
CVE-2026-107090Not scoredAn issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic
CVE-2026-1070806.5 MediumOpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service.
CVE-2026-1067817.8 HighAn issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.
CVE-2026-106677Not scoredHomestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and mark messages as read for arbitrary conversation ids because the service does…
CVE-2026-106676Not scoredqiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value. The order creation flow does not validate the resulting quantity and passes it…
CVE-2026-104598Not scoredlibosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.
CVE-2026-104597Not scoredlibosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.
CVE-2026-1045967.5 Highlibosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote attacker to obtain sensitive information.
CVE-2026-1045947.5 Highlibosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.
CVE-2026-104593Not scoredosmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.
CVE-2026-1045926.5 Mediumlibosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.
CVE-2026-1045917.5 Highlibosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.
CVE-2026-1160995.3 MediumFusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
CVE-2026-1160985.3 MediumSteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization
CVE-2026-1160975.3 MediumCloudClassroom-PHP-Project addnewstudent.php cross site scripting
CVE-2026-1160964.8 Mediumggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
CVE-2026-1160956.9 Mediumsmg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation
CVE-2026-1160946.9 MediumEyouCMS function.php remote_file_to_local server-side request forgery
CVE-2026-1156276.0 MediumAshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows
CVE-2026-1156356.0 MediumAshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set
CVE-2026-1142146.0 MediumLoading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records
CVE-2026-1160635.1 MediumDedeCMS update_guide.php require_once code injection
CVE-2026-1160626.9 MediumSourceCodester Performance Indicator System save_profile.php sql injection
CVE-2026-1160616.9 MediumSourceCodester Performance Indicator System edit_dealer.php sql injection
CVE-2026-115825Not scoredHTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length
CVE-2026-115824Not scoredStarman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies
CVE-2026-115823Not scoredStarman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections
CVE-2026-115822Not scoredStarman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies
CVE-2026-115817Not scoredStarman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers
CVE-2026-1160606.9 MediumSourceCodester Performance Indicator System adddealer.php sql injection
CVE-2026-1160585.3 MediumAlfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection
CVE-2026-1160575.3 MediumKodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
CVE-2026-1160565.3 MediumKodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
CVE-2026-1160555.3 MediumSourceCodester Performance Indicator System deleteproduct.php sql injection

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.