Browse CVEs

MEDIUM 5.3 CVE-2026-61392 There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the … No fix yet Fix from $1,6002026-07-22 HIGH 7.2 CVE-2026-61391 There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction b… No fix yet Fix from $1,9502026-07-22 HIGH 7.7 CVE-2026-61390 There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sen… No fix yet Fix from $1,9502026-07-22 HIGH 7.5 CVE-2026-57600 Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive … No fix yet Fix from $1,9502026-07-22 MEDIUM 6.6 CVE-2026-57599 There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can … No fix yet Fix from $1,6002026-07-22 HIGH 8.1 CVE-2026-4773 Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA allows Authentication Bypass. This issue affect… Mitigation only Fix from $1,9502026-07-22 MEDIUM 6.6 CVE-2026-44192 A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to ma… No fix yet Fix from $1,6002026-07-22 HIGH 7.8 CVE-2026-44190 A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to ex… No fix yet Fix from $1,9502026-07-22 HIGH 7.8 CVE-2026-44189 A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an … No fix yet Fix from $1,9502026-07-22 MEDIUM 6.9 CVE-2026-16551 Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only. No fix yet Fix from $1,6002026-07-22 MEDIUM 6.5 CVE-2026-16544 A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumer_access… No fix yet Fix from $1,6002026-07-22 MEDIUM 6.5 CVE-2025-13146 The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includ… No fix yet Fix from $1,6002026-07-22 HIGH 8.8 CVE-2026-14551 The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are vulnerable to Local Privilege … No fix yet Fix from $1,9502026-07-22 MEDIUM 5.3 CVE-2026-63264 Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3 - The Joomla extension JoomShopping is vulnerable to an reflected XSS vu… No fix yet Fix from $1,6002026-07-22 MEDIUM 6.5 CVE-2026-2406 Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration an… No fix yet Fix from $1,6002026-07-22 MEDIUM 6.4 CVE-2026-15787 The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-… No fix yet Fix from $1,6002026-07-22 CRITICAL 9.4 CVE-2026-63048 Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authen… No fix yet Fix from $2,3002026-07-22 HIGH 7.5 CVE-2026-63047 Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events B… No fix yet Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-3821 Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input … No fix yet Fix from $1,9502026-07-22 MEDIUM 5.3 CVE-2026-14322 The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than… No fix yet Fix from $1,6002026-07-22 HIGH 7.5 CVE-2026-12987 The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-User-Account Booking Mode: a boo… No fix yet Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-12968 The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthenticated file-upload endpoint a… No fix yet Fix from $1,9502026-07-22 HIGH 8.1 CVE-2026-15802 The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_bac… No fix yet Fix from $1,9502026-07-22 HIGH 8.4 CVE-2026-56844 A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain roo… No fix yet Fix from $1,9502026-07-22 MEDIUM 6.3 CVE-2026-16490 A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /prescription.php. Th… No fix yet Fix from $1,6002026-07-22 MEDIUM 5.3 CVE-2026-16489 A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib/registry/sfdx.js of the comp… No fix yet Fix from $1,6002026-07-22 HIGH 8.6 CVE-2026-65318 Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to ca… Mitigation only Fix from $1,9502026-07-21 HIGH 8.6 CVE-2026-65317 Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows un… No fix yet Fix from $1,9502026-07-21 MEDIUM 6.5 CVE-2026-65316 XXL-Job version 2.4.2 contains an insecure direct object reference vulnerability that allows authenticated users to read execution log content from j… No fix yet Fix from $1,6002026-07-21 HIGH 7.5 CVE-2026-65315 Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the … No fix yet Fix from $1,9502026-07-21