Total
397948 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21554 | 2026-08-28 | N/A | 7.5 HIGH | ||
| In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | |||||
| CVE-2026-21548 | 2026-08-28 | N/A | 7.5 HIGH | ||
| In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed. | |||||
| CVE-2026-21555 | 2026-08-28 | N/A | 7.5 HIGH | ||
| In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | |||||
| CVE-2026-15570 | 2026-08-28 | N/A | N/A | ||
| An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue requests to unintended loopback/internal destinations, including 127.0.0.1 addresses. In demonstrated scenarios, requests initiated through the SmartCenter browserseturl mechanism could reach an internal service and receive a successful response, although the same destination was not reachable through normal browser navigation. The issue affects firmware version V2.78.0.0 and is fixed in firmware version V2.85.2.0. | |||||
| CVE-2026-21550 | 2026-08-28 | N/A | 7.5 HIGH | ||
| In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | |||||
| CVE-2026-21551 | 2026-08-28 | N/A | 7.5 HIGH | ||
| In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | |||||
| CVE-2026-21549 | 2026-08-28 | N/A | 7.5 HIGH | ||
| In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | |||||
| CVE-2026-72601 | 2026-08-28 | N/A | 7.5 HIGH | ||
| A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form submissions including personally identifiable information via the admin form-submission viewer. The viewer endpoint lacks an authentication check and the framework authentication helper fails open. An unauthenticated attacker can access all contact form submissions without credentials. | |||||
| CVE-2026-72596 | 2026-08-28 | N/A | 8.1 HIGH | ||
| A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible() cascade is missing the branch that handles the combined isAuthor and isDestroy condition, causing the authorization check to fall through and permit the deletion. An attacker with an Author account can delete any post on the platform. | |||||
| CVE-2026-72604 | 2026-08-28 | N/A | 6.5 MEDIUM | ||
| A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink() without sanitization or path canonicalization. An authenticated administrator can delete sensitive system files outside the web root, potentially causing server instability or facilitating further attacks. | |||||
| CVE-2026-72569 | 2026-08-28 | N/A | 9.1 CRITICAL | ||
| A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option. | |||||
| CVE-2026-72584 | 2026-08-28 | N/A | 7.4 HIGH | ||
| A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes. | |||||
| CVE-2026-72563 | 2026-08-28 | N/A | 8.1 HIGH | ||
| A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead model has guarded set to an empty array making all columns mass-assignable. An attacker with any agent account can corrupt lead data across team boundaries. | |||||
| CVE-2026-72594 | 2026-08-28 | N/A | 7.6 HIGH | ||
| A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar. | |||||
| CVE-2026-72590 | 2026-08-28 | N/A | 9.8 CRITICAL | ||
| An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env_vars parameter. | |||||
| CVE-2026-70378 | 2026-08-28 | N/A | 7.5 HIGH | ||
| imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is positive. A negative ratio (e.g. -5) causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passed to imageproc::seam_carving::shrink_width — a function that panics when given a width below 2, crashing the process. | |||||
| CVE-2026-72593 | 2026-08-28 | N/A | 9.8 CRITICAL | ||
| A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem. | |||||
| CVE-2026-72602 | 2026-08-28 | N/A | 7.5 HIGH | ||
| A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths via the local-repository structure endpoint. The endpoint accepts an absolute filesystem path parameter and returns a directory listing without authentication, as WIKI_AUTH_MODE defaults to false. An attacker can enumerate sensitive directory contents on the host system. | |||||
| CVE-2026-72567 | 2026-08-28 | N/A | 9.8 CRITICAL | ||
| An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The api/api.py wiki-cache endpoint constructs file paths from user-controlled owner, repo, and repo_type fields without sanitization, enabling path traversal. | |||||
| CVE-2026-54416 | 2026-08-28 | N/A | 7.2 HIGH | ||
| Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php ('.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar'), checked against the last 4-5 characters of the filename. | |||||