Total
396407 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-82853 | 2026-09-10 | N/A | 4.9 MEDIUM | ||
| Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject arbitrary SMTP commands for email spoofing and phishing attacks. | |||||
| CVE-2026-84696 | 2026-09-10 | N/A | 8.2 HIGH | ||
| Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles. | |||||
| CVE-2026-82876 | 2026-09-10 | N/A | 8.2 HIGH | ||
| Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the signature segment, and the controller accepts the tampered firmware as valid. | |||||
| CVE-2026-73788 | 2026-09-10 | N/A | 6.5 MEDIUM | ||
| A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system. | |||||
| CVE-2026-73786 | 2026-09-10 | N/A | 7.5 HIGH | ||
| A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server. | |||||
| CVE-2026-73789 | 2026-09-10 | N/A | 5.3 MEDIUM | ||
| A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources. | |||||
| CVE-2026-85180 | 2026-09-10 | N/A | 7.5 HIGH | ||
| Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can control a registry, serve a malicious tensor-layer manifest, and cause the server to issue GET requests to internal hosts including cloud metadata endpoints. | |||||
| CVE-2026-79908 | 3 Adobe, Apple, Microsoft | 5 Acrobat, Acrobat Dc, Acrobat Reader Dc and 2 more | 2026-09-10 | N/A | 7.8 HIGH |
| Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-81803 | 2026-09-10 | N/A | 7.5 HIGH | ||
| Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions. | |||||
| CVE-2026-66632 | 2026-09-10 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions. | |||||
| CVE-2026-81788 | 2026-09-10 | N/A | 6.3 MEDIUM | ||
| Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions. | |||||
| CVE-2026-84821 | 2026-09-10 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions. | |||||
| CVE-2026-81795 | 2026-09-10 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.3 versions. | |||||
| CVE-2026-81783 | 2026-09-10 | N/A | 7.1 HIGH | ||
| Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions. | |||||
| CVE-2026-59679 | 2026-09-10 | N/A | 9.0 CRITICAL | ||
| fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExtents16 reply. The two CARD32 fields are never cross-checked. A malicious or compromised font server can send a small num_extents (e.g. 1) in the extents reply, then a large num_chars (e.g. 100000) in the bitmaps reply. This causes attacker-controlled out-of-bounds heap read and writes. | |||||
| CVE-2026-84206 | 2026-09-10 | N/A | 4.3 MEDIUM | ||
| Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without delete rights to restore soft-deleted assets. Attackers with edit permissions can post asset identifiers to the bulk restore endpoint to undo administrator deletions and bypass intended permission separation. | |||||
| CVE-2026-42808 | 2026-09-10 | N/A | 6.8 MEDIUM | ||
| An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the boundaries of the caller-provided destination buffer. Internally, the stream processing mechanism in {{comm_intf_process_stream_response()}} discards the requested {{number_of_samples}} argument and copies the entirety of the streaming ring buffer's accumulated data into {{coines_stream_rsp_buf}}. Subsequently, {{coines_read_stream_sensor_data()}} unconditionally executes a {{memcpy}} of the ring buffer size into the caller-provided buffer without verifying if the destination memory allocation is large enough. A malicious or compromised hardware board connected via USB or BLE can exploit this by streaming a high volume of sensor samples, causing a heap or stack-based buffer overflow on the host desktop environment. This can result in a Denial of Service (DoS) or potential arbitrary code execution on the host machine. | |||||
| CVE-2025-15613 | 2026-09-10 | N/A | 6.5 MEDIUM | ||
| Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with permission to create Kyverno (Cluster)Policies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster services, it also resolves external addresses, allowing requests to an attacker-controlled server. Because policy context data (including contents of Kubernetes resources such as secrets) is sent in these requests, an attacker can exfiltrate sensitive cluster data. | |||||
| CVE-2026-86097 | 2026-09-10 | N/A | 6.5 MEDIUM | ||
| PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set_backup_file() functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 shell to trigger the crash. | |||||
| CVE-2023-54356 | 2026-09-10 | N/A | 3.7 LOW | ||
| Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0. | |||||