Browse CVEs

HIGH 8.7 CVE-2026-12659 A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when pr… Mitigation only Fix from $1,9502026-07-14 MEDIUM 6.5 CVE-2026-11944 openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that a… Opensis Mitigation only Fix from $1,6002026-07-14 HIGH 7.2 CVE-2026-11917 A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the… Mitigation only Fix from $1,9502026-07-14 HIGH 8.7 CVE-2026-11403 A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to … Mitigation only Fix from $1,9502026-07-14 CRITICAL 9.2 CVE-2025-11698 A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a m… Mitigation only Fix from $2,3002026-07-14 HIGH 8.7 CVE-2026-9653 A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Conn… Mitigation only Fix from $1,9502026-07-14 HIGH 8.7 CVE-2026-9140 A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP unicast network storm, which ca… Mitigation only Fix from $1,9502026-07-14 HIGH 8.7 CVE-2026-8590 Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server module… No fix yet Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-51105 Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OP_SERVERMESSAGE Handler. Mitigation only Fix from $1,9502026-07-14 HIGH 8.3 CVE-2026-15736 Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifi… Mitigation only Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-15696 A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Suc… Mitigation only Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-15695 A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This… Mitigation only Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-15694 A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of… Mitigation only Fix from $1,9502026-07-14 CRITICAL 9.1 CVE-2026-15265 A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intende… Mitigation only Fix from $2,3002026-07-14 HIGH 8.8 CVE-2026-10714 A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authent… Mitigation only Fix from $1,9502026-07-14 HIGH 8.7 CVE-2026-10573 A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP messages, which c… Mitigation only Fix from $1,9502026-07-14 CRITICAL 9.2 CVE-2025-12012 A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file dat… Mitigation only Fix from $2,3002026-07-14 CRITICAL 9.2 CVE-2025-12011 A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, caus… Mitigation only Fix from $2,3002026-07-14 MEDIUM 6.8 CVE-2026-53566 Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: befo… Mitigation only Fix from $1,6002026-07-14 HIGH 8.8 CVE-2026-15693 A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeM… Mitigation only Fix from $1,9502026-07-14 HIGH 8.5 CVE-2026-53565 Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. This iss… Mitigation only Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-15692 A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFi… Mitigation only Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-15691 A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilte… Mitigation only Fix from $1,9502026-07-14 MEDIUM 6.0 CVE-2026-12588 An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection would then… Mitigation only Fix from $1,6002026-07-14 CRITICAL 10.0 CVE-2026-10577 A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce… Mitigation only Fix from $2,3002026-07-14 HIGH 8.7 CVE-2026-15389 A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST… Mitigation only Fix from $1,9502026-07-14 CRITICAL 10.0 CVE-2026-56451 A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the algorithm specified in t… Mitigation only Fix from $2,3002026-07-14 HIGH 7.4 CVE-2026-54429 A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected devices do not properly handle high-volume multicast netwo… Mitigation only Fix from $1,9502026-07-14 CRITICAL 9.1 CVE-2026-3014 Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. … Mitigation only Fix from $2,3002026-07-14 MEDIUM 5.2 CVE-2026-14852 Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows a local unprivile… Mitigation only Fix from $1,6002026-07-14