Export limit exceeded: 414622 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414622 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-123747 | 3 Openprinting, Red Hat, Redhat | 3 Pappl-retrofit, Enterprise Linux, Enterprise Linux | 2026-11-15 | 7.3 High |
| A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command execution. | ||||
| CVE-2026-91873 | 1 Dell | 1 Openmanage Ansible Modules | 2026-11-15 | 8.7 High |
| Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. | ||||
| CVE-2026-65957 | 1 Gethelio | 1 Helio | 2026-11-15 | N/A |
| Helio is an MCP proxy that sits between AI agents and the tools they use. Prior to version 0.8.0, the dashboard sideband (default 127.0.0.1:3100) validated CORS request origins by matching the hostname against a private-network string prefix (10., 172.16.–172.31., 192.168.) rather than validating an IP address. A public DNS name such as 192.168.attacker.com, 10.evil.io, or 172.16.pwn.example also satisfies that prefix, so the proxy echoed the attacker origin in Access-Control-Allow-Origin. This issue has been patched in version 0.8.0. | ||||
| CVE-2026-126797 | 1 Tongcheng-security-team | 1 Nextscan | 2026-11-15 | 9.8 Critical |
| NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key. Attackers can sign an HS256 X-Access-Token carrying the public super administrator role ID to gain full access to user management, scan tasks and stored vulnerability results. | ||||
| CVE-2026-126798 | 1 Tongcheng-security-team | 1 Nextscan | 2026-11-15 | 4.7 Medium |
| NextScan 1.1.0 through 1.2.0 contains a stored cross-site scripting vulnerability in the ns-admin URL asset detail dialog that renders crawled form request bodies (Asset_URL.data) via innerHTML without encoding. Attackers can host crafted forms on crawled sites to store JavaScript that executes when users view asset details, stealing localStorage access tokens to hijack sessions, including administrators. | ||||
| CVE-2026-126800 | 1 Hydro-dev | 1 Hydro | 2026-11-15 | 8.7 High |
| Hydro @hydrooj/ui-default before 4.59.1 contains a stored cross-site scripting vulnerability that allows registered users to inject script by placing double quotes in language- class tokens within markdown-it-xss.ts. Attackers can store a payload in their profile bio that executes when administrators or other users view it, stealing the non-httpOnly sid session cookie for session hijacking. | ||||
| CVE-2026-126801 | 1 Rabithua | 1 Rote | 2026-11-15 | 8.8 High |
| Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and delete the victim account. | ||||
| CVE-2026-126802 | 1 Tongcheng-security-team | 1 Nextscan | 2026-11-15 | 8.2 High |
| NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers that allow unauthenticated attackers to access protected APIs. Attackers can call /agent/config to obtain Redis passwords, etcd details and the server token, and impersonate scan nodes via registration, heartbeat and logging endpoints. | ||||
| CVE-2026-126803 | 1 Rabithua | 1 Rote | 2026-11-15 | 7.2 High |
| Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain super_admin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256 tokens for the super administrator to change user roles and escalate their own account. | ||||
| CVE-2026-126807 | 1 Asternic | 1 Wuzapi | 2026-11-15 | 4.3 Medium |
| WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chat_jid=index to list every user's internal ID, stored chat JIDs, and last-message times. | ||||
| CVE-2026-65973 | 1 Petebishwhip | 1 Laradocs | 2026-11-15 | 6.4 Medium |
| Laradocs maintains version-controlled documentation inside a Laravel codebase. From version 0.4.0 to before version 1.0.0, Laradocs is vulnerable to local command injection in server-side KaTeX rendering via an unescaped Node.js binary path in a proc_open() command string. This issue has been patched in version 1.0.0. | ||||
| CVE-2026-65982 | 1 Winshining | 1 Nginx-http-flv-module | 2026-11-15 | N/A |
| nginx-http-flv-module is a media streaming server based on nginx-rtmp-module. Prior to version 1.2.14, if a server received an HTTP/1.0 request without a header Host, which was permitted by HTTP core of Nginx, then r->headers_in.host was NULL, nginx-http-flv-module used r->headers_in.host->value to make a pseudo tcUrl, so NULL-pointer dereference happened. This issue has been patched in version 1.2.14. | ||||
| CVE-2026-15309 | 2 Wishlist Member, Wordpress-extensions | 2 Coursecure Courses, Coursecure Courses | 2026-11-15 | 8.8 High |
| The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without any authorization verification. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges to administrator by setting the default_role WordPress option to 'administrator' and users_can_register to '1', then registering a new account that is automatically granted full administrator access. | ||||
| CVE-2026-124705 | 1 Progress | 1 Telerik Ui For .net Maui | 2026-11-15 | 7.8 High |
| In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens. | ||||
| CVE-2026-110951 | 1 Hyper Teknoloji | 3 Hyper E-commerce Infrastructure, Hyper E-commerce Infrastructure - Dealer Integration, Hyper E-commerce Infrastructure - Storefront Application And Management Panel | 2026-11-15 | 7.5 High |
| Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Password Recovery Exploitation. This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796. | ||||
| CVE-2026-111552 | 1 Hyper Teknoloji | 3 Hyper E-commerce Infrastructure, Hyper E-commerce Infrastructure - Dealer Integration, Hyper E-commerce Infrastructure - Storefront Application And Management Panel | 2026-11-15 | 7.1 High |
| Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Authentication Bypass. This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796. | ||||
| CVE-2026-125285 | 1 Tibco | 1 Tibco Platform’s Self-hosted Control Plane | 2026-11-15 | N/A |
| Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted Control Plane. This issue affects TIBCO Platform’s Self-Hosted Control Plane: from 1 through 1.21. | ||||
| CVE-2026-92083 | 1 Tübi̇tak Bi̇lgem Yazılım Teknolojileri Araştırma Enstitüsü | 1 Pardus-image-writer | 2026-11-15 | 7.8 High |
| Missing Authorization vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-writer allows Privilege Escalation. This issue affects pardus-image-writer: before 0.9.0. | ||||
| CVE-2026-120490 | 1 Checkpoint | 1 Scalable Platforms (elasticxl, Maestro, Chassis) | 2026-11-15 | 3.8 Low |
| On Scalable Platforms, an administrator with permissions to edit and install the Access Control Policy and NAT rules can create a NAT rule that redirects traffic to the Gateway's Sync interface, bypassing the built-in Sync protection. This could allow the administrator to execute operating system commands and write files on the Gateway with superuser privileges. | ||||
| CVE-2026-120869 | 1 Citrix Netscaler | 1 Console | 2026-11-15 | N/A |
| An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance | ||||