Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,665 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-116191 | 8.7 High | Rclone before 1.75.2 Path Traversal via serve webdav MKCOL | Oct 25, 2026 |
| CVE-2026-116190 | 6.3 Medium | rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect | Oct 25, 2026 |
| CVE-2026-116189 | 7.7 High | rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS | Oct 25, 2026 |
| CVE-2026-116188 | 6.9 Medium | rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow | Oct 25, 2026 |
| CVE-2026-116187 | 6.1 Medium | Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads | Oct 25, 2026 |
| CVE-2026-116183 | 8.7 High | phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID | Oct 25, 2026 |
| CVE-2026-116182 | 5.3 Medium | phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching | Oct 25, 2026 |
| CVE-2026-116181 | 7.1 High | vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids | Oct 25, 2026 |
| CVE-2026-116180 | 8.3 High | vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors | Oct 25, 2026 |
| CVE-2026-116179 | 8.7 High | vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override | Oct 25, 2026 |
| CVE-2026-116178 | 8.2 High | vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders | Oct 25, 2026 |
| CVE-2026-116177 | 8.7 High | vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass | Oct 25, 2026 |
| CVE-2026-116176 | 8.8 High | vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector | Oct 25, 2026 |
| CVE-2026-116175 | 7.1 High | vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions | Oct 25, 2026 |
| CVE-2026-116174 | 8.2 High | vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate | Oct 25, 2026 |
| CVE-2026-116173 | 8.2 High | vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids | Oct 25, 2026 |
| CVE-2026-116172 | 8.2 High | vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n | Oct 25, 2026 |
| CVE-2026-116171 | 5.9 Medium | SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix | Oct 25, 2026 |
| CVE-2026-116170 | 6.9 Medium | SiYuan before v3.8.7 SQL Injection via History Search op and query | Oct 25, 2026 |
| CVE-2026-116169 | 5.1 Medium | SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks | Oct 25, 2026 |
| CVE-2026-116168 | 6.9 Medium | SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool | Oct 25, 2026 |
| CVE-2026-116167 | 7.6 High | SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter | Oct 25, 2026 |
| CVE-2026-116166 | 7.6 High | SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting | Oct 25, 2026 |
| CVE-2026-116165 | 8.8 High | Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticated Class Schema Deletion on MongoDB | Oct 25, 2026 |
| CVE-2026-116164 | 6.3 Medium | Parse Server 9.0.0 before 9.10.4-alpha.3 Reserved Field Name Injection via Object Writes | Oct 25, 2026 |
| CVE-2026-116163 | 9.1 Critical | Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasses | Oct 25, 2026 |
| CVE-2026-116162 | 2.1 Low | Parse Server 9.0.0 before 9.10.5-alpha.5 Privilege Escalation via SMS MFA Login | Oct 25, 2026 |
| CVE-2026-116161 | 6.0 Medium | Parse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Information Disclosure via $or Subscriptions | Oct 25, 2026 |
| CVE-2026-116160 | 4.8 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate | Oct 25, 2026 |
| CVE-2026-116159 | 4.8 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option | Oct 25, 2026 |
| CVE-2026-116158 | 2.0 Low | ImageMagick before 7.1.2-33 Memory Leak in magick compare | Oct 25, 2026 |
| CVE-2026-116157 | 4.8 Medium | ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading | Oct 25, 2026 |
| CVE-2026-116156 | 4.8 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option | Oct 25, 2026 |
| CVE-2026-116155 | 6.9 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile | Oct 25, 2026 |
| CVE-2026-116154 | 6.9 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit | Oct 25, 2026 |
| CVE-2026-116153 | 2.0 Low | ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit | Oct 25, 2026 |
| CVE-2026-116152 | 6.9 Medium | ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path | Oct 25, 2026 |
| CVE-2026-116151 | 6.3 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder | Oct 25, 2026 |
| CVE-2026-116150 | 2.3 Low | ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder | Oct 25, 2026 |
| CVE-2026-116149 | 7.2 High | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images | Oct 25, 2026 |
| CVE-2026-116148 | 4.8 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options | Oct 25, 2026 |
| CVE-2026-116147 | 6.3 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder | Oct 25, 2026 |
| CVE-2026-116146 | 6.3 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder | Oct 25, 2026 |
| CVE-2026-116145 | 1.8 Low | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix | Oct 25, 2026 |
| CVE-2026-116144 | 4.8 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder | Oct 25, 2026 |
| CVE-2026-116143 | 4.8 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders | Oct 25, 2026 |
| CVE-2026-116142 | 4.8 Medium | ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box | Oct 25, 2026 |
| CVE-2026-116141 | 6.9 Medium | ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder | Oct 25, 2026 |
| CVE-2026-116140 | 4.8 Medium | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing | Oct 25, 2026 |
| CVE-2026-116139 | 5.1 Medium | WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering | Oct 25, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.