Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
102,590 matching · page 170/2052Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-14273(opens NVD record) | Medium | 6.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization. | Oct 8, 2026 |
| CVE-2026-14269(opens NVD record) | Critical | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary code on the system. | Oct 8, 2026 |
| CVE-2026-13258(opens NVD record) | Medium | 5.4 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | Oct 8, 2026 |
| CVE-2026-13257(opens NVD record) | Medium | 6.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity. | Oct 8, 2026 |
| CVE-2026-12859(opens NVD record) | Medium | 6.5 | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | Oct 8, 2026 |
| CVE-2026-107640(opens NVD record) | Critical | 9.1 | Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset_key matches the defaulted empty value, to take over administrator accounts after enumerating valid usernames. | Oct 8, 2026 |
| CVE-2026-107639(opens NVD record) | High | 8.8 | ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd() does not neutralise, to write a PHP file under the web root and achieve remote code execution. | Oct 8, 2026 |
| CVE-2026-107638(opens NVD record) | Medium | 6.8 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits. Attackers who know an account password can submit unlimited 6-digit verification codes to VerificationCodeFormProcess.php to take over member, affiliate, or administrator accounts. | Oct 8, 2026 |
| CVE-2026-107637(opens NVD record) | Medium | 4.3 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in the note module delete() action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remove all comments and category associations, since those queries lack profile ID checks. | Oct 8, 2026 |
| CVE-2026-107636(opens NVD record) | Medium | 6.5 | pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set item_number, cart_order_id, or the PayPal custom field while paying a token amount, or submit uncompleted PayPal IPN payments, to gain the most expensive membership and its paid features. | Oct 8, 2026 |
| CVE-2026-107635(opens NVD record) | Medium | 6.1 | Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smaller than the 36-byte AES-CCM header, causing hexdump() to over-read and crash dislocker. | Oct 8, 2026 |
| CVE-2026-107634(opens NVD record) | Medium | 6.1 | Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted, crashes dislocker or discloses adjacent heap memory. | Oct 8, 2026 |
| CVE-2026-107623(opens NVD record) | Medium | 4.3 | A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the setting to be silently disabled. As a result, offline tokens may remain valid even after a user session is terminated via backchannel logout. | Oct 8, 2026 |
| CVE-2026-107604(opens NVD record) | Medium | 4.9 | A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted. This exposed secret can be used to impersonate the client and gain unauthorized access to its associated service account permissions. | Oct 8, 2026 |
| CVE-2026-107589(opens NVD record) | High | 7.5 | Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names. | Oct 8, 2026 |
| CVE-2026-107586(opens NVD record) | Medium | 4.3 | Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote authenticated user to end other users' sessions. The table of browser sessions, shared by every account, the server administrator and support sessions, dropped its least recently used session whenever it was full, whoever it belonged to, and placed no limit on how many sessions one account could hold. A user who repeatedly signs in with their own mailbox password can therefore keep the table full and sign out every webmail and administration session that is idle for more than a short time, for as long as they continue. | Oct 8, 2026 |
| CVE-2026-107585(opens NVD record) | Medium | 5.3 | Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to make other users' OpenID Connect, SAML and passkey sign-ins fail. The routes that start a single sign-on and hand out a passkey sign-in challenge are reached without authentication and stored pending state in bounded tables that dropped their oldest entry when full, whoever had started it. An attacker who starts sign-ins a few times a second (about a hundred a second for passkeys) pushes every other user's pending sign-in out of the table before that user's browser returns, denying single sign-on and passkey sign-in for as long as the requests continue. | Oct 8, 2026 |
| CVE-2026-107565(opens NVD record) | Medium | 5.1 | A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free space or over existing records. This issue can corrupt stored encrypted payload data or existing metadata, potentially rendering the affected data inaccessible. | Oct 8, 2026 |
| CVE-2026-107286(opens NVD record) | High | 7.5 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.53.0, streamed requests made through ConcurrencyLimitedModel or limit_model_concurrency can retain shared concurrency slots because anyio.CapacityLimiter associates an acquired slot with the borrowing task while streaming cleanup can run in a different task. Early stream termination, cancellation, consumer exceptions, or complete stream_text() consumption with debounce_by=0.1 can therefore leave capacity occupied, eventually preventing later requests that share the long-lived limiter from proceeding and causing a denial of service. Agent-level max_concurrency and non-streaming model requests are not affected. This issue is fixed in version 2.53.0. | Oct 8, 2026 |
| CVE-2026-105833(opens NVD record) | High | 7.7 | EspoCRM before 10.0.5 contains an insecure direct object reference vulnerability in PersonalAccount\Service that allows users with Email Account scope access to retrieve other users' IMAP passwords. Attackers who know a victim's Email Account record ID can request that record to steal stored IMAP credentials and access the victim's mailbox. | Oct 8, 2026 |
| CVE-2026-105832(opens NVD record) | Medium | 4.3 | EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user's username and password can skip the second factor to read config parameters not exposed publicly. | Oct 8, 2026 |
| CVE-2026-105831(opens NVD record) | Medium | 4.3 | EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record, though Content Security Policy blocks JavaScript execution. | Oct 8, 2026 |
| CVE-2026-105830(opens NVD record) | High | 7.5 | league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU. | Oct 8, 2026 |
| CVE-2026-105829(opens NVD record) | Medium | 6.1 | League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers can place a lone <script or <iframe line followed by a block supplying attributes like src or onload, executing stored scripts in viewers' browsers under default GFM settings. | Oct 8, 2026 |
| CVE-2026-105828(opens NVD record) | Unscored | — | Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send crafted operations triggering unknown-argument or invalid enum value errors to learn pointer and relation target classes. | Oct 8, 2026 |
| CVE-2026-105827(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105826(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105825(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105824(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105823(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105405(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105404(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105403(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105402(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105401(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105400(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105399(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105398(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 |
| CVE-2026-105331(opens NVD record) | Unscored | — | Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled. | Oct 8, 2026 |
| CVE-2026-91844(opens NVD record) | High | 7.3 | Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6. | Oct 8, 2026 |
| CVE-2026-89290(opens NVD record) | Low | 3.5 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7. | Oct 8, 2026 |
| CVE-2026-88257(opens NVD record) | Unscored | — | Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties: false) were advertised by tools/list and never checked at tools/call or prompts/get, and keywords outside the enforced subset (oneOf, anyOf, $ref) were advertised and ignored. A host whose dispatch code relies on the schema it declared receives values the schema forbids, such as an out-of-range number or an undeclared key inside a nested object. What the host does with such a value decides the impact. This issue affects beam_mcp: from 0.1.0 before 0.10.1. | Oct 8, 2026 |
| CVE-2026-42698(opens NVD record) | Medium | 5.3 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1. | Oct 8, 2026 |
| CVE-2026-27420(opens NVD record) | Medium | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katie Seaborn Zotpress zotpress allows Stored XSS.This issue affects Zotpress: from n/a through 7.4.4. | Oct 8, 2026 |
| CVE-2026-16167(opens NVD record) | High | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking. | Oct 8, 2026 |
| CVE-2026-16165(opens NVD record) | High | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference. | Oct 8, 2026 |
| CVE-2026-16164(opens NVD record) | High | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow. | Oct 8, 2026 |
| CVE-2026-16163(opens NVD record) | High | 8.6 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write. | Oct 8, 2026 |
| CVE-2026-16161(opens NVD record) | High | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. | Oct 8, 2026 |
| CVE-2026-16159(opens NVD record) | High | 8.6 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write. | Oct 8, 2026 |