CVEs published by VulnCheck

CVEs published by VulnCheck (CVE Numbering Authority). 713 tracked.

• CVE-2026-61515 CRITICAL 9.8 Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability
• CVE-2026-60113 CRITICAL 9.8 UPGRADE AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authenticati
• CVE-2026-67324 CRITICAL 9.8 UPGRADE GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pa
• CVE-2026-74886 CRITICAL 9.8 UPGRADE openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuar
• CVE-2026-68770 CRITICAL 9.8 sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitr
• CVE-2026-61514 CRITICAL 9.8 Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows
• CVE-2026-69098 CRITICAL 9.8 kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint th
• CVE-2026-68771 CRITICAL 9.8 ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows u
• CVE-2026-74880 CRITICAL 9.8 UPGRADE openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry
• CVE-2026-69110 CRITICAL 9.1 OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remot
• CVE-2026-67325 HIGH 8.8 UPGRADE GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's lon
• CVE-2026-60112 CRITICAL 9.8 UPGRADE AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows an
• CVE-2026-67191 CRITICAL 9.8 Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows re
• CVE-2026-67323 HIGH 8.4 UPGRADE GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archi
• CVE-2026-67195 HIGH 8.8 Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to exec
• CVE-2026-76221 HIGH 8.8 UPGRADE GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allow
• CVE-2026-69100 HIGH 8.8 LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulne
• CVE-2026-48242 HIGH 8.1 Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, pass
• CVE-2026-67215 HIGH 7.5 UPGRADE cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC
• CVE-2026-67192 HIGH 8.1 Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows u
• CVE-2026-67330 CRITICAL 9.9 @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 throu
• CVE-2026-74892 HIGH 7.5 UPGRADE openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry serve
• CVE-2022-4984 HIGH 8.7 ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.b
• CVE-2026-40521 HIGH 8.8 FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that al
• CVE-2026-60109 HIGH 7.5 UPGRADE Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that all
• CVE-2026-67200 HIGH 7.5 Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read
• CVE-2026-67182 HIGH 7.5 Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to b
• CVE-2026-56340 HIGH 8.8 UPGRADE vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing
• CVE-2026-67184 HIGH 7.5 TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote att
• CVE-2026-67185 HIGH 7.5 TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read ar
• CVE-2026-57510 HIGH 8.8 SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC
• CVE-2026-67216 MEDIUM 5.9 UPGRADE cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare()
• CVE-2026-62199 HIGH 8.8 UPGRADE OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter
• CVE-2026-62203 HIGH 8.8 UPGRADE OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fa
• CVE-2026-67183 HIGH 7.5 TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust av
• CVE-2026-67322 HIGH 7.5 UPGRADE GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from()
• CVE-2026-62217 HIGH 8.8 UPGRADE OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature
• CVE-2026-62223 HIGH 8.8 UPGRADE OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature th
• CVE-2026-77079 HIGH 8.8 UPGRADE n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignmen
• CVE-2025-34336 MEDIUM 6.9 eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file u
• CVE-2026-67328 HIGH 8.1 @better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider
• CVE-2026-66745 HIGH 7.5 Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulne
• CVE-2026-67217 MEDIUM 5.3 UPGRADE cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c
• CVE-2026-62192 HIGH 8.1 UPGRADE OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild acti
• CVE-2026-67331 HIGH 8.3 better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their
• CVE-2026-67198 HIGH 7.5 Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that all
• CVE-2026-53982 MEDIUM 6.5 Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows a
• CVE-2026-62227 HIGH 7.7 UPGRADE OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot ro
• CVE-2026-62220 MEDIUM 5.3 UPGRADE OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser
• CVE-2026-67607 MEDIUM 5.9 LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the
• CVE-2026-67326 HIGH 7.0 UPGRADE GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allo
• CVE-2026-67199 MEDIUM 6.5 Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server
• CVE-2026-62186 HIGH 7.6 UPGRADE OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP mode
• CVE-2026-62206 HIGH 7.1 UPGRADE OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions
• CVE-2026-57511 MEDIUM 5.4 SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers
• CVE-2026-67213 MEDIUM 5.9 UPGRADE nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions
• CVE-2026-67214 MEDIUM 5.9 UPGRADE nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions
• CVE-2026-67193 MEDIUM 5.3 Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthenticated at
• CVE-2026-48245 MEDIUM 5.3 Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the
• CVE-2026-67329 HIGH 7.1 @better-auth/stripe versions >= 1.4.11 and < 1.6.21, and >= 1.7.0-beta.0 and < 1.7.0-beta.10, contain an autho
• CVE-2026-53844 MEDIUM 6.5 UPGRADE OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search tha
• CVE-2026-67618 MEDIUM 6.5 marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltr
• CVE-2026-76239 MEDIUM 6.3 Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions,
• CVE-2026-74890 MEDIUM 5.5 UPGRADE openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that di
• CVE-2026-76226 MEDIUM 6.3 Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module
• CVE-2026-59102 MEDIUM 5.4 Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers
• CVE-2026-66400 MEDIUM 4.8 Grav Login Plugin versions before 3.8.13 contain an insufficient session expiration vulnerability in TokenStor
• CVE-2026-67196 MEDIUM 5.4 Perspective 5.0.0 contains a cross-site scripting vulnerability in the built-in Debug plugin that allows attac
• CVE-2026-67350 MEDIUM 4.3 Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attac
• CVE-2026-25552 LOW 3.7 Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to
• CVE-2026-109299 MEDIUM 6.5 Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users
• CVE-2026-109298 MEDIUM 6.5 Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tool
• CVE-2026-109297 MEDIUM 6.5 Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule v
• CVE-2026-109296 MEDIUM 4.3 Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to rea
• CVE-2026-109295 MEDIUM 4.3 Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows
• CVE-2026-109294 MEDIUM 6.5 Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows a
• CVE-2026-109290 HIGH 8.7 Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelt
• CVE-2026-109287 MEDIUM 4.3 Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does
• CVE-2024-58396 HIGH 7.5 YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated
• CVE-2022-51025 MEDIUM 6.5 Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticate
• CVE-2022-51021 HIGH 8.2 NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability
• CVE-2021-48014 CRITICAL 9.8 FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operatio
• CVE-2019-25778 HIGH 8.2 SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to man
• CVE-2017-20289 HIGH 7.5 Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability t
• CVE-2026-67208 CRITICAL 9.8 Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attacke
• CVE-2025-34282 CRITICAL 9.1 UPGRADE ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Ima
• CVE-2026-67594 CRITICAL 9.8 Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated re
• CVE-2026-65321 CRITICAL 9.8 PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to injec
• CVE-2026-67341 CRITICAL 9.8 ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION stat
• CVE-2026-67342 CRITICAL 9.8 ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series
• CVE-2025-34522 CRITICAL 9.8 UPGRADE A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protecti
• CVE-2026-54363 CRITICAL 9.1 CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attac
• CVE-2026-66418 CRITICAL 9.3 UPGRADE OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated rem
• CVE-2025-34181 HIGH 8.7 NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gate
• CVE-2026-67346 HIGH 8.6 Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is
• CVE-2025-34179 HIGH 8.7 NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Se
• CVE-2026-54368 HIGH 8.8 CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() t
• CVE-2026-67351 HIGH 8.8 Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation
• CVE-2026-54367 HIGH 8.6 CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers
• CVE-2026-67343 HIGH 8.8 ArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/server endpoint,
• CVE-2025-34155 MEDIUM 6.9 Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionali
• CVE-2026-67345 HIGH 8.1 MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability
• CVE-2026-67340 HIGH 7.2 ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Ja
• CVE-2026-67356 HIGH 8.8 ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.AL
• CVE-2026-54365 HIGH 7.5 CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allo
• CVE-2026-57859 HIGH 7.5 e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler tha
• CVE-2025-34248 HIGH 7.2 D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web
• CVE-2026-67348 HIGH 8.1 Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that al
• CVE-2026-68581 HIGH 8.1 Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management
• CVE-2025-71433 HIGH 7.5 Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access ot
• CVE-2025-34156 MEDIUM 6.9 Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endp
• CVE-2026-54364 MEDIUM 6.5 CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attack
• CVE-2026-67352 HIGH 7.6 luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter th
• CVE-2026-67357 HIGH 7.5 ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings
• CVE-2026-67347 MEDIUM 6.8 Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in
• CVE-2026-72809 HIGH 8.0 SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's C
• CVE-2026-68578 HIGH 7.5 ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing al
• CVE-2026-48236 HIGH 7.1 Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POS
• CVE-2026-64816 MEDIUM 6.5 RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open() in
• CVE-2026-72799 MEDIUM 5.8 SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree path-resolut
• CVE-2026-48244 MEDIUM 5.3 Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed t
• CVE-2026-48246 MEDIUM 5.9 Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_S
• CVE-2026-67332 MEDIUM 6.4 @better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant
• CVE-2026-68582 MEDIUM 6.5 Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in th
• CVE-2026-48225 MEDIUM 5.4 Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allo
• CVE-2026-48230 MEDIUM 5.4 Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ticketsmdb_import.p
• CVE-2026-67596 MEDIUM 6.2 CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unau
• CVE-2026-68583 MEDIUM 5.4 luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist nam
• CVE-2026-10031 MEDIUM 5.4 SFTPGo prior to 2.7.4 contains a permission bypass vulnerability that allows authenticated users to circumvent
• CVE-2026-67344 MEDIUM 4.3 ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database permission on the ALTER TYPE ..
• CVE-2026-115506 HIGH 7.5 libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in account
• CVE-2026-115360 MEDIUM 4.7 OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects u
• CVE-2026-115352 HIGH 7.5 Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows un
• CVE-2026-115348 HIGH 7.5 Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's p
• CVE-2026-112342 HIGH 7.1 Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py tha
• CVE-2026-112330 HIGH 7.5 Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publi
• CVE-2026-41452 CRITICAL 9.8 Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unaut
• CVE-2026-69084 CRITICAL 10.0 SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL
• CVE-2026-69085 CRITICAL 10.0 SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where th
• CVE-2026-53975 CRITICAL 9.8 OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attacker
• CVE-2026-53976 CRITICAL 9.1 OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs
• CVE-2026-70553 CRITICAL 9.8 MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arb
• CVE-2026-64827 CRITICAL 9.8 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authenti
• CVE-2026-70554 CRITICAL 9.8 MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arb
• CVE-2026-69096 HIGH 8.8 OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC bac
• CVE-2026-70552 CRITICAL 9.8 MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allo
• CVE-2026-69703 CRITICAL 9.8 Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/cont
• CVE-2026-70558 CRITICAL 9.8 Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new F
• CVE-2026-69083 CRITICAL 10.0 SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint
• CVE-2026-69102 CRITICAL 9.8 MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-max

← Back to latest CVEs