Browse CVEs

MEDIUM 6.5 CVE-2026-16637 OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers … No fix yet Fix from $1,6002026-08-07 HIGH 7.1 CVE-2026-15570 An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on… No fix yet Fix from $1,9502026-08-07 HIGH 8.2 CVE-2026-66838 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via t… Postgrex 0.22.4+ Fix from $1,9502026-08-07 HIGH 8.7 CVE-2026-66494 Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can store… No fix yet Fix from $1,9502026-08-07 MEDIUM 6.5 CVE-2026-56794 Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with re… Openmanage Server Administrator 11.1.0.2+ Fix from $1,6002026-08-07 CRITICAL 9.8 CVE-2026-56793 Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with… Openmanage Server Administrator 11.1.0.2+ Fix from $2,3002026-08-07 MEDIUM 5.3 CVE-2026-48094 The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url()… Patch available Fix from $1,6002026-08-07 HIGH 7.5 CVE-2026-15816 A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory wit… No fix yet Fix from $1,9502026-08-07 CRITICAL 9.1 CVE-2026-71560 Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deser… Fory 1.5.0+ Fix from $2,3002026-08-07 HIGH 7.5 CVE-2026-71559 Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying … Fory 1.5.0+ Fix from $1,9502026-08-07 CRITICAL 9.8 CVE-2026-71558 Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafte… Fory 1.5.0+ Fix from $2,3002026-08-07 HIGH 8.8 CVE-2026-54218 Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stor… No fix yet Fix from $1,9502026-08-07 MEDIUM 5.3 CVE-2026-54217 Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious… No fix yet Fix from $1,6002026-08-07 MEDIUM 5.3 CVE-2026-54216 Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) vulnerability. By sending a specially crafted l… No fix yet Fix from $1,6002026-08-07 MEDIUM 5.3 CVE-2026-54215 Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnera… No fix yet Fix from $1,6002026-08-07 MEDIUM 5.3 CVE-2026-54214 Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrar… No fix yet Fix from $1,6002026-08-07 CRITICAL 9.2 CVE-2026-54213 Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/inter… No fix yet Fix from $2,3002026-08-07 CRITICAL 9.5 CVE-2026-54212 Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a buffer overflow condition. By submitting a s… No fix yet Fix from $2,3002026-08-07 CRITICAL 9.5 CVE-2026-54211 Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulnerable to a buffer overflow vulnerability in mult… No fix yet Fix from $2,3002026-08-07 CRITICAL 9.5 CVE-2026-54210 Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable to a buffer overflow conditi… No fix yet Fix from $2,3002026-08-07 HIGH 8.9 CVE-2026-54209 Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including the string "(editini)" in the … No fix yet Fix from $1,9502026-08-07 HIGH 8.5 CVE-2026-54208 Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write … No fix yet Fix from $1,9502026-08-07 MEDIUM 6.3 CVE-2026-54207 Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network loca… No fix yet Fix from $1,6002026-08-07 MEDIUM 6.3 CVE-2026-54206 Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network loc… No fix yet Fix from $1,6002026-08-07 MEDIUM 6.3 CVE-2026-54205 Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set … No fix yet Fix from $1,6002026-08-07 HIGH 7.7 CVE-2026-54204 Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC… No fix yet Fix from $1,9502026-08-07 CRITICAL 9.2 CVE-2026-54203 Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessin… No fix yet Fix from $2,3002026-08-07 HIGH 8.5 CVE-2026-54202 Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive… No fix yet Fix from $1,9502026-08-07 MEDIUM 6.9 CVE-2026-54201 Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization checks when serving these log files. As a result, attacke… No fix yet Fix from $1,6002026-08-07 HIGH 8.4 CVE-2026-54200 Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By … No fix yet Fix from $1,9502026-08-07