Browse CVEs

HIGH 7.5 CVE-2026-56238 Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint that allows unauthenticated at… Mitigation only Fix from $1,9502026-07-12 MEDIUM 6.3 CVE-2026-15500 A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. Affected by this vulnerability is the function get_online_plugins of the file ast… Mitigation only Fix from $1,6002026-07-12 MEDIUM 6.3 CVE-2026-15499 A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of the file astrbot/core/tools/… Mitigation only Fix from $1,6002026-07-12 HIGH 7.3 CVE-2026-15498 A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c. This impacts an unknown function of the … Mitigation only Fix from $1,9502026-07-12 HIGH 7.3 CVE-2026-15497 A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/mai… Mitigation only Fix from $1,9502026-07-12 MEDIUM 6.3 CVE-2026-15496 A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/mai… Mitigation only Fix from $1,6002026-07-12 MEDIUM 6.3 CVE-2026-15495 A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java… No fix yet Fix from $1,6002026-07-12 HIGH 7.3 CVE-2026-15491 A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. This affects an unknown part. This manipul… No fix yet Fix from $1,9502026-07-12 HIGH 7.3 CVE-2026-15490 A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this issue is some unknow… Mitigation only Fix from $1,9502026-07-12 HIGH 7.3 CVE-2026-15489 A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this vulnerability is an unkno… Mitigation only Fix from $1,9502026-07-12 MEDIUM 6.3 CVE-2026-15487 A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmwa… Mitigation only Fix from $1,6002026-07-12 MEDIUM 6.3 CVE-2026-15486 A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/tools_ddns of the component F… Mitigation only Fix from $1,6002026-07-12 MEDIUM 6.3 CVE-2026-15485 A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C4 of the file /goform/tools_nslookup of the compo… Mitigation only Fix from $1,6002026-07-12 HIGH 8.8 CVE-2026-15484 A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of th… Mitigation only Fix from $1,9502026-07-12 HIGH 8.8 CVE-2026-15483 A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of … Mitigation only Fix from $1,9502026-07-12 HIGH 7.3 CVE-2026-15482 A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /azcall/adm/gestao_loja/sis.php?… Mitigation only Fix from $1,9502026-07-12 HIGH 8.8 CVE-2026-15481 A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of t… Mitigation only Fix from $1,9502026-07-12 HIGH 8.8 CVE-2026-15480 A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web … Mitigation only Fix from $1,9502026-07-12 HIGH 7.3 CVE-2026-15479 A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the com… Mitigation only Fix from $1,9502026-07-12 MEDIUM 6.3 CVE-2026-15478 A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports/EmployeeAttendanceReport.php… Mitigation only Fix from $1,6002026-07-12 MEDIUM 6.3 CVE-2026-15477 A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/s… Mitigation only Fix from $1,6002026-07-12 MEDIUM 5.3 CVE-2026-15476 A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of … Mitigation only Fix from $1,6002026-07-12 MEDIUM 5.3 CVE-2026-15475 A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the… Mitigation only Fix from $1,6002026-07-12 MEDIUM 6.3 CVE-2026-15473 A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAc… Mitigation only Fix from $1,6002026-07-12 MEDIUM 5.3 CVE-2026-61454 The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFIG__ in the Admin2 SPA bootstr… Mitigation only Fix from $1,6002026-07-11 CRITICAL 10.0 CVE-2026-61447 PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without… Mitigation only Fix from $2,3002026-07-11 CRITICAL 9.9 CVE-2026-61445 PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation a… Mitigation only Fix from $2,3002026-07-11 HIGH 7.5 CVE-2026-61439 PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowin… Mitigation only Fix from $1,9502026-07-11 HIGH 8.5 CVE-2026-61429 PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass… Mitigation only Fix from $1,9502026-07-11 HIGH 7.3 CVE-2026-61428 PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with sp… Mitigation only Fix from $1,9502026-07-11