Browse CVEs

HIGH 7.1 CVE-2026-19389 Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objec… No fix yet Fix from $1,9502026-08-10 HIGH 7.6 CVE-2026-19387 A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient … No fix yet Fix from $1,9502026-08-10 HIGH 7.3 CVE-2026-19384 A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admi… No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-19381 A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library N… No fix yet Fix from $1,9502026-08-10 HIGH 7.3 CVE-2026-19379 A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. Th… No fix yet Fix from $1,9502026-08-10 HIGH 7.3 CVE-2026-19376 A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php… No fix yet Fix from $1,9502026-08-10 MEDIUM 6.3 CVE-2026-19375 A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_… No fix yet Fix from $1,6002026-08-10 HIGH 7.3 CVE-2026-19374 A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of… No fix yet Fix from $1,9502026-08-09 MEDIUM 5.3 CVE-2026-19373 A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19372 A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSy… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19371 A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the c… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19370 A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19369 A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attac… No fix yet Fix from $1,6002026-08-09 MEDIUM 6.3 CVE-2026-19367 A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/ran… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19366 A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the … No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19365 A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the compone… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.5 CVE-2026-69659 Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset paginati… Ash Framework 3.31.1+ Fix from $1,6002026-08-09 MEDIUM 6.3 CVE-2026-19364 A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /viewdoctorcon… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19363 A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19362 A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parse_token_from_header of the file src/parse_token… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.7 CVE-2026-15534 Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_reg… Patch available Fix from $1,6002026-08-09 MEDIUM 6.3 CVE-2026-19358 A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation ca… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19357 A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form/get of the component ms-mdiy… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.3 CVE-2026-19356 A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unknown function of the file /mdiy/form/data/list of the component ms-md… No fix yet Fix from $1,6002026-08-09 HIGH 7.3 CVE-2026-19355 A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/lis… No fix yet Fix from $1,9502026-08-09 MEDIUM 6.3 CVE-2026-19354 A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file c… No fix yet Fix from $1,6002026-08-09 MEDIUM 5.0 CVE-2026-19353 A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the function _4_Setup of the file install/index.php of the c… No fix yet Fix from $1,6002026-08-09 HIGH 7.3 CVE-2026-19351 A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/Sel… Patch available Fix from $1,9502026-08-09 MEDIUM 6.3 CVE-2026-19350 A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component Ta… Patch available Fix from $1,6002026-08-09 CRITICAL 9.8 CVE-2026-19348 A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fna… No fix yet Fix from $2,3002026-08-09