Total
413903 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-87911 | 2026-09-10 | N/A | 9.6 CRITICAL | ||
| An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... TO PROGRAM statement into content that is processed when an authenticated user interacts with the MCP server in its default read-only mode. To remediate this issue, users should upgrade to version 1.1.7 or later. | |||||
| CVE-2026-85092 | 2026-09-10 | N/A | 6.6 MEDIUM | ||
| LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link with the expected filename pointing to any root-owned file, and when the acquisition runs in kernel context, LiME follows the link and truncates the target file with the memory acquisition stream. | |||||
| CVE-2026-84715 | 2026-09-10 | N/A | 8.8 HIGH | ||
| FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant themselves full server control, enabling unauthorized access to sensitive data, backups, and server configuration. | |||||
| CVE-2026-82660 | 2026-09-10 | N/A | 5.4 MEDIUM | ||
| Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local files or fetch URLs by supplying path or href values in message content fields, bypassing intended access controls. | |||||
| CVE-2026-82662 | 2026-09-10 | N/A | 6.5 MEDIUM | ||
| Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitted over compromised HTTPS connections. | |||||
| CVE-2026-82659 | 2026-09-10 | N/A | 7.1 HIGH | ||
| nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw messages with file paths or URLs that bypass the intended sandbox, with fetched content delivered in the outgoing message to attacker-controlled recipients. | |||||
| CVE-2024-58379 | 2026-09-10 | N/A | 5.3 MEDIUM | ||
| nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. Attackers can send specially crafted emails with malicious data URLs or embedded attachments to cause the event loop to hang and deny service. | |||||
| CVE-2026-82661 | 2026-09-10 | N/A | 5.4 MEDIUM | ||
| Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with control over list.*.comment parameters can inject CRLF sequences to create additional headers in generated RFC822 messages, altering mail client behavior and message semantics. | |||||
| CVE-2026-82853 | 2026-09-10 | N/A | 4.9 MEDIUM | ||
| Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject arbitrary SMTP commands for email spoofing and phishing attacks. | |||||
| CVE-2026-84696 | 2026-09-10 | N/A | 8.2 HIGH | ||
| Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles. | |||||
| CVE-2026-82876 | 2026-09-10 | N/A | 8.2 HIGH | ||
| Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the signature segment, and the controller accepts the tampered firmware as valid. | |||||
| CVE-2026-73788 | 2026-09-10 | N/A | 6.5 MEDIUM | ||
| A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system. | |||||
| CVE-2026-73786 | 2026-09-10 | N/A | 7.5 HIGH | ||
| A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server. | |||||
| CVE-2026-73789 | 2026-09-10 | N/A | 5.3 MEDIUM | ||
| A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources. | |||||
| CVE-2026-85180 | 2026-09-10 | N/A | 7.5 HIGH | ||
| Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can control a registry, serve a malicious tensor-layer manifest, and cause the server to issue GET requests to internal hosts including cloud metadata endpoints. | |||||
| CVE-2026-79908 | 3 Adobe, Apple, Microsoft | 5 Acrobat, Acrobat Dc, Acrobat Reader Dc and 2 more | 2026-09-10 | N/A | 7.8 HIGH |
| Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-81803 | 2026-09-10 | N/A | 7.5 HIGH | ||
| Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions. | |||||
| CVE-2026-66632 | 2026-09-10 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions. | |||||
| CVE-2026-81788 | 2026-09-10 | N/A | 6.3 MEDIUM | ||
| Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions. | |||||
| CVE-2026-84821 | 2026-09-10 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions. | |||||