Browse CVEs

HIGH 7.3 CVE-2026-14641 A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of… Mitigation only Fix from $1,9502026-07-04 HIGH 7.3 CVE-2026-14640 A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the compone… Mitigation only Fix from $1,9502026-07-04 MEDIUM 6.3 CVE-2026-14639 A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_ac… Mitigation only Fix from $1,6002026-07-04 MEDIUM 6.3 CVE-2026-14638 A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of… Mitigation only Fix from $1,6002026-07-04 MEDIUM 5.3 CVE-2026-14628 A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of the file gateway/platforms/base… Mitigation only Fix from $1,6002026-07-04 MEDIUM 5.6 CVE-2026-14627 A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2. This affects the function DiscordAdapter._is_allowed_user of th… Mitigation only Fix from $1,6002026-07-04 MEDIUM 6.3 CVE-2026-14625 A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shell.exec of the file tui_gatewa… Mitigation only Fix from $1,6002026-07-04 HIGH 7.3 CVE-2026-14622 A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unkn… Mitigation only Fix from $1,9502026-07-04 MEDIUM 6.3 CVE-2026-14619 A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php.… Mitigation only Fix from $1,6002026-07-04 HIGH 8.8 CVE-2025-71380 The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user acces… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71373 picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote a… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71372 Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code executio… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71375 picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can cr… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71369 picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods, al… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71367 picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks. Remote… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71366 picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71362 picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can … Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71360 picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce methods. Attackers can embed unde… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71359 picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method, allowing re… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71356 picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function calls in pickle… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71364 picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods, allowing remote c… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71353 picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods. Attack… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71347 picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in reduce methods, allowing attacke… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71345 picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.__main__.run_autograd_prof function. Attackers can… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71343 picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_label function in the reduce met… Mitigation only Fix from $1,9502026-07-04 HIGH 8.1 CVE-2025-71342 picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods. Attackers can embed undetected… Mitigation only Fix from $1,9502026-07-04 HIGH 8.4 CVE-2026-54424 An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Pa… Mitigation only Fix from $1,9502026-07-04 MEDIUM 5.6 CVE-2026-14609 A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue affects some unknown process… Mitigation only Fix from $1,6002026-07-03 CRITICAL 9.8 CVE-2026-12481 A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` la… Keras Mitigation only Fix from $2,3002026-07-03 HIGH 7.8 CVE-2026-14606 A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/… Mitigation only Fix from $1,9502026-07-03