Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,740 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-76289 | 6.5 Medium | Denial of Service (DoS) through the REST API in Splunk Enterprise | Oct 21, 2026 |
| CVE-2026-76288 | 7.5 High | Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise | Oct 21, 2026 |
| CVE-2026-76287 | 5.4 Medium | Authorization Bypass in the Data Management REST API in Splunk Enterprise | Oct 21, 2026 |
| CVE-2026-114441 | 6.9 Medium | oretnom23 php-travel-agency-system update.php sql injection | Oct 21, 2026 |
| CVE-2026-89052 | 5.9 Medium | Hardcoded AES encryption key in Archer C6 | Oct 21, 2026 |
| CVE-2026-114440 | 6.9 Medium | oretnom23 php-travel-agency-system delete.php sql injection | Oct 21, 2026 |
| CVE-2026-103090 | 8.8 High | Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM) | Oct 21, 2026 |
| CVE-2026-114439 | 6.9 Medium | oretnom23 php-travel-agency-system Session session.php missing authentication | Oct 21, 2026 |
| CVE-2026-114384 | 5.3 Medium | itsourcecode Online Cake Ordering System transactionsave.php sql injection | Oct 21, 2026 |
| CVE-2026-114509 | 9.2 Critical | Laravel TokenGuard authentication bypass through non-string API credentials | Oct 21, 2026 |
| CVE-2026-114508 | 6.5 Medium | Laravel relationship inclusion can trigger unauthorized data destruction | Oct 21, 2026 |
| CVE-2026-114383 | 10.0 Critical | TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow | Oct 21, 2026 |
| CVE-2026-112921 | 7.3 High | Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request | Oct 21, 2026 |
| CVE-2026-114382 | 10.0 Critical | TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow | Oct 21, 2026 |
| CVE-2026-91403 | 9.1 Critical | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21,… | Oct 21, 2026 |
| CVE-2026-94423 | 9.1 Critical | Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts | Oct 21, 2026 |
| CVE-2026-94140 | 9.1 Critical | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no | Oct 21, 2026 |
| CVE-2026-114501 | 6.3 Medium | Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 | Oct 21, 2026 |
| CVE-2026-114381 | 5.3 Medium | itsourcecode Online Cake Ordering System orderdetail.php sql injection | Oct 21, 2026 |
| CVE-2026-96639 | 9.8 Critical | Pillow multi-frame loaders can reuse stale native image storage after mode transitions | Oct 21, 2026 |
| CVE-2026-96636 | 6.5 Medium | Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) | Oct 21, 2026 |
| CVE-2026-29001 | 8.6 High | TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization | Oct 21, 2026 |
| CVE-2026-96640 | 8.2 High | Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion | Oct 21, 2026 |
| CVE-2026-96637 | 7.1 High | Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS | Oct 21, 2026 |
| CVE-2026-114380 | 5.3 Medium | itsourcecode Online Cake Ordering System inserttrans.php sql injection | Oct 21, 2026 |
| CVE-2026-113811 | 7.5 High | Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search | Oct 21, 2026 |
| CVE-2026-96778 | 7.7 High | Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer | Oct 21, 2026 |
| CVE-2026-114406 | 6.8 Medium | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | Oct 21, 2026 |
| CVE-2026-96643 | 7.1 High | Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time | Oct 21, 2026 |
| CVE-2026-96644 | 7.1 High | Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) | Oct 21, 2026 |
| CVE-2026-96641 | 6.5 Medium | Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise | Oct 21, 2026 |
| CVE-2026-96642 | 7.1 High | Pillow: TarIO negative size field causes infinite CPU-spin loop | Oct 21, 2026 |
| CVE-2026-82987 | 7.5 High | CVE-2026-82987 | Oct 21, 2026 |
| CVE-2026-96638 | 6.5 Medium | Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode | Oct 21, 2026 |
| CVE-2026-114379 | 5.3 Medium | EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion | Oct 21, 2026 |
| CVE-2026-114145 | 7.5 High | GitPython validates a submodule's ".git" path only after cloning into it (RCE) | Oct 21, 2026 |
| CVE-2026-114144 | 7.5 High | toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse() | Oct 21, 2026 |
| CVE-2026-114143 | 8.7 High | toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse() | Oct 21, 2026 |
| CVE-2026-114378 | 5.3 Medium | itsourcecode Online Cake Ordering System deleteproduct.php sql injection | Oct 21, 2026 |
| CVE-2026-114142 | 8.8 High | toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype | Oct 21, 2026 |
| CVE-2026-114141 | 8.7 High | toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse() | Oct 21, 2026 |
| CVE-2026-114140 | 8.8 High | nbconvert: File write via path traversal in cell output filenames | Oct 21, 2026 |
| CVE-2026-114377 | 5.1 Medium | leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal | Oct 21, 2026 |
| CVE-2026-114139 | 9.1 Critical | Sentry-Javascript: Middleware Bypass when using Tunnel route | Oct 21, 2026 |
| CVE-2026-114138 | 7.5 High | Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation | Oct 21, 2026 |
| CVE-2026-114137 | 7.4 High | Django REST framework: TokenProxy.delete() reports success and revokes nothing | Oct 21, 2026 |
| CVE-2026-114136 | 7.5 High | Django REST framework: JSONParser applies an attacker-named codec to the request stream | Oct 21, 2026 |
| CVE-2026-114376 | 5.3 Medium | leomoon-studios wiki-go API editor.go SourceHandler path traversal | Oct 21, 2026 |
| CVE-2026-114135 | 8.8 High | Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization | Oct 21, 2026 |
| CVE-2026-114375 | 5.3 Medium | leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal | Oct 21, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.