Browse CVEs

MEDIUM 6.5 CVE-2026-69702 SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server … No fix yet Fix from $1,6002026-08-04 HIGH 7.1 CVE-2026-68743 A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining … Openshift Container Platform No fix yet Fix from $1,9502026-08-04 CRITICAL 9.8 CVE-2026-49435 Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially cr… Mitigation only Fix from $2,3002026-08-04 HIGH 8.4 CVE-2026-47781 PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plu… No fix yet Fix from $1,9502026-08-04 HIGH 8.4 CVE-2026-47764 pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through… No fix yet Fix from $1,9502026-08-04 HIGH 7.1 CVE-2026-13229 Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint. No fix yet Fix from $1,9502026-08-04 CRITICAL 9.8 CVE-2026-0163 In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege w… No fix yet Fix from $2,3002026-08-04 CRITICAL 9.8 CVE-2017-20242 Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted pa… Mitigation only Fix from $2,3002026-08-04 CRITICAL 9.8 CVE-2017-20241 Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted pac… No fix yet Fix from $2,3002026-08-04 MEDIUM 6.8 CVE-2026-47763 pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local sta… No fix yet Fix from $1,6002026-08-04 HIGH 8.1 CVE-2026-18830 Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing mode… No fix yet Fix from $1,9502026-08-04 HIGH 7.3 CVE-2026-18788 A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager… No fix yet Fix from $1,9502026-08-04 HIGH 8.4 CVE-2026-64634 A vulnerability allowing local privilege escalation to the Reporter service context. No fix yet Fix from $1,9502026-08-04 CRITICAL 10.0 CVE-2026-64633 A vulnerability allowing remote unauthenticated code execution on the agent host. No fix yet Fix from $2,3002026-08-04 HIGH 8.5 CVE-2026-64631 A vulnerability allowing a low-privileged user to inject SQL and extract database contents. No fix yet Fix from $1,9502026-08-04 HIGH 8.7 CVE-2026-58075 A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges loca… No fix yet Fix from $1,9502026-08-04 HIGH 8.6 CVE-2026-58074 A vulnerability allowing a high-privileged user to execute arbitrary code on the server. No fix yet Fix from $1,9502026-08-04 MEDIUM 5.3 CVE-2026-64630 A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. No fix yet Fix from $1,6002026-08-04 CRITICAL 9.8 CVE-2026-63456 Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web… No fix yet Fix from $2,3002026-08-04 CRITICAL 9.8 CVE-2026-63455 Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web… Mitigation only Fix from $2,3002026-08-04 CRITICAL 9.5 CVE-2026-58073 A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credenti… No fix yet Fix from $2,3002026-08-04 CRITICAL 9.0 CVE-2026-58072 A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution. Mitigation only Fix from $2,3002026-08-04 HIGH 8.2 CVE-2026-58071 A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator dur… No fix yet Fix from $1,9502026-08-04 HIGH 8.7 CVE-2026-58067 A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service. No fix yet Fix from $1,9502026-08-04 HIGH 7.5 CVE-2026-56848 A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resu… No fix yet Fix from $1,9502026-08-04 HIGH 8.8 CVE-2026-18787 A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function remove_rule of the file /usr/share/gl-ngx/oui-rpc.… No fix yet Fix from $1,9502026-08-04 MEDIUM 5.3 CVE-2026-18785 A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is the function UA_Client_getRemoteDataTypes of the… No fix yet Fix from $1,6002026-08-04 MEDIUM 5.3 CVE-2026-18784 A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_cli… No fix yet Fix from $1,6002026-08-04 MEDIUM 6.3 CVE-2026-18775 A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects the function browser_snapshot of the file tools/… No fix yet Fix from $1,6002026-08-04 MEDIUM 6.3 CVE-2026-18774 A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function save_url_image of the file agent/image_gen_provider.py of … No fix yet Fix from $1,6002026-08-04