CVEs published by MITRE

CVEs published by MITRE (CVE Numbering Authority). 129 tracked.

• CVE-2026-110447 CRITICAL 9.2 EXPLOITED MITIGATE Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
• CVE-2026-110734 LOW 2.5 Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hd
• CVE-2026-38711 CRITICAL 9.8 TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,
• CVE-2026-38708 CRITICAL 9.8 TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,
• CVE-2026-38713 CRITICAL 9.8 TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,
• CVE-2026-51785 CRITICAL 9.8 An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a c
• CVE-2023-30191 CRITICAL 9.8 UPGRADE PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::init
• CVE-2022-47762 HIGH 7.5 UPGRADE In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.
• CVE-2023-30367 HIGH 7.5 UPGRADE Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and m
• CVE-2026-38710 HIGH 7.2 TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.s
• CVE-2026-36837 HIGH 7.5 TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the h
• CVE-2026-67978 HIGH 7.5 An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via t
• CVE-2023-25392 MEDIUM 5.9 UPGRADE Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.
• CVE-2023-33524 MEDIUM 5.3 UPGRADE Advent/SSC Inc
• CVE-2025-57835 HIGH 7.5 MITIGATE MITIGATE An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850
• CVE-2023-22972 MEDIUM 5.4 UPGRADE A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in O
• CVE-2025-61166 MEDIUM 6.1 DOWNGRADE An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via
• CVE-2025-56536 MEDIUM 6.1 UPGRADE A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrar
• CVE-2026-38709 CRITICAL 9.8 TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19,
• CVE-2025-50229 CRITICAL 9.8 DOWNGRADE Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.
• CVE-2026-36045 HIGH 7.3 picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shel
• CVE-2025-66844 CRITICAL 9.1 UPGRADE In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page c
• CVE-2026-38426 HIGH 7.3 Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arb
• CVE-2025-66769 HIGH 7.5 DOWNGRADE A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Servi
• CVE-2025-56535 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web s
• CVE-2026-52102 CRITICAL 9.8 An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attack
• CVE-2026-67688 CRITICAL 9.8 ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file uplo
• CVE-2026-71190 HIGH 8.7 In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnera
• CVE-2026-67866 HIGH 7.5 Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service vi
• CVE-2026-67867 HIGH 7.5 Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service vi
• CVE-2026-67871 HIGH 7.5 Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service vi
• CVE-2026-67872 HIGH 7.5 An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored
• CVE-2026-67973 HIGH 7.5 An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via r
• CVE-2026-52521 HIGH 8.1 A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL comma
• CVE-2026-55707 HIGH 7.1 In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subn
• CVE-2026-71191 MEDIUM 6.0 In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered
• CVE-2026-51400 HIGH 8.4 UPGRADE An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fi
• CVE-2026-71192 MEDIUM 6.0 In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy
• CVE-2026-51401 HIGH 7.7 UPGRADE An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fi
• CVE-2026-71201 MEDIUM 5.0 In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgro
• CVE-2026-90648 HIGH 7.1 wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-b
• CVE-2026-73282 MEDIUM 4.8 UPGRADE In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forward
• CVE-2026-72522 MEDIUM 6.2 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated
• CVE-2026-73281 LOW 3.5 UPGRADE In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locall
• CVE-2026-73283 LOW 2.5 UPGRADE In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tun
• CVE-2026-106765 HIGH 7.5 An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleIma
• CVE-2026-106764 HIGH 7.5 An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseB
• CVE-2026-106763 HIGH 7.5 An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the
• CVE-2025-69723 HIGH n/a A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrar
• CVE-2026-52356 HIGH n/a An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WW
• CVE-2026-50787 HIGH n/a e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in rest
• CVE-2026-115863 HIGH 7.6 ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message
• CVE-2026-90458 MEDIUM 5.4 OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BM
• CVE-2026-89419 MEDIUM 5.0 OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH t
• CVE-2026-115638 MEDIUM 4.3 OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amou
• CVE-2025-65200 HIGH n/a An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content h
• CVE-2025-45528 HIGH n/a An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary co
• CVE-2026-71193 CRITICAL 9.6 In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone
• CVE-2026-51583 HIGH 8.5 An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request For
• CVE-2026-71194 MEDIUM 6.8 In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queri
• CVE-2026-50772 CRITICAL 9.8 An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted
• CVE-2026-67678 CRITICAL 9.8 File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary co
• CVE-2026-67967 CRITICAL 9.8 Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code
• CVE-2026-50774 CRITICAL 9.8 An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.
• CVE-2026-51346 CRITICAL 9.1 SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to e
• CVE-2026-50770 CRITICAL 9.8 An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a cra
• CVE-2026-50776 HIGH 7.5 Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to ob
• CVE-2026-67918 HIGH 7.5 Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive infor
• CVE-2026-68005 HIGH 7.5 An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP
• CVE-2026-50773 HIGH 7.8 An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbt
• CVE-2026-50771 MEDIUM 6.1 Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute ar
• CVE-2025-60497 MEDIUM 5.5 A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows a
• CVE-2025-60494 HIGH n/a A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project
• CVE-2025-60492 MEDIUM 5.5 A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 all
• CVE-2025-60491 HIGH n/a A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2
• CVE-2025-60490 HIGH n/a A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC
• CVE-2025-60489 HIGH n/a A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP
• CVE-2025-60487 HIGH n/a A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before
• CVE-2026-113386 HIGH 7.1 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection
• CVE-2026-38165 CRITICAL 9.8 A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocrep
• CVE-2026-67919 CRITICAL 9.8 An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, instal
• CVE-2026-67960 CRITICAL 9.8 An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserC
• CVE-2026-67920 HIGH 8.8 An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl
• CVE-2026-52481 HIGH 7.5 An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive informa
• CVE-2026-67961 HIGH 7.8 An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of t
• CVE-2026-52480 MEDIUM 6.5 An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive informa
• CVE-2025-71438 HIGH n/a An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 all
• CVE-2025-60496 HIGH n/a A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP
• CVE-2025-60479 HIGH n/a A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box b
• CVE-2025-60478 HIGH n/a A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box b
• CVE-2025-60476 HIGH n/a A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box be
• CVE-2025-60469 HIGH n/a A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Pro
• CVE-2026-71675 HIGH 7.5 An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() f
• CVE-2026-115482 HIGH 7.5 In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of
• CVE-2026-110354 HIGH 7.5 HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worke
• CVE-2026-110353 HIGH 7.5 HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread
• CVE-2026-51954 HIGH n/a An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a craft
• CVE-2026-78801 HIGH n/a An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remo
• CVE-2026-78846 HIGH n/a AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing.
• CVE-2026-71195 CRITICAL 9.9 In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the call
• CVE-2026-107079 HIGH n/a An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t
• CVE-2026-93856 MEDIUM 4.3 In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API
• CVE-2025-60475 HIGH n/a A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2
• CVE-2025-60493 HIGH n/a A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before
• CVE-2026-114720 HIGH 7.1 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability
• CVE-2026-114716 HIGH 8.5 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability
• CVE-2026-114730 HIGH 7.2 Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery fil
• CVE-2026-114727 HIGH 8.3 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when
• CVE-2026-114731 MEDIUM 5.3 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vul
• CVE-2026-114722 MEDIUM 6.5 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages
• CVE-2026-114726 MEDIUM 5.8 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in
• CVE-2026-114728 MEDIUM 5.3 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the
• CVE-2026-114729 MEDIUM 5.3 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass
• CVE-2026-114732 MEDIUM 6.8 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability
• CVE-2026-114715 MEDIUM 6.8 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability
• CVE-2026-114724 HIGH 7.4 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session
• CVE-2026-114714 MEDIUM 5.3 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the sq
• CVE-2026-114717 MEDIUM 4.0 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability wh
• CVE-2026-114723 LOW 3.7 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed d
• CVE-2026-114725 MEDIUM 5.0 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability
• CVE-2026-114719 LOW 3.7 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-
• CVE-2026-114718 MEDIUM 4.7 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in
• CVE-2026-114721 LOW 3.1 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be
• CVE-2015-5477 HIGH 7.5 EXPLOITED UPGRADE MITIGATE ISC BIND Data Processing Errors Vulnerability
• CVE-2015-3306 CRITICAL 10.0 EXPLOITED MITIGATE MITIGATE ProFTPD Improper Access Control Vulnerability
• CVE-2021-3199 CRITICAL 9.8 EXPLOITED UPGRADE ONLYOFFICE Docs Server Path Traversal Vulnerability
• CVE-2023-22894 MEDIUM 4.9 EXPLOITED UPGRADE Strapi Cleartext Storage of Sensitive Information Vulnerability
• CVE-2023-49105 CRITICAL 9.8 EXPLOITED UPGRADE ownCloud Improper Authentication Vulnerability
• CVE-2026-60004 CRITICAL 9.8 EXPLOITED UPGRADE Gitea Code Injection Vulnerability

← Back to latest CVEs