All CVEs — page 147 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• UNSCOREDCVE-2026-61541public exploit available2026-09-21
• MEDIUM 5.4CVE-2026-59830public exploit available2026-09-21

  The flaw allows user-controlled display names to contain HTML, enabling script injection in post actions. This can lead to cross-site scripting (XSS) attacks.

• MEDIUM 4.3CVE-2026-59815public exploit available2026-09-21

  The flaw allows a low-privileged authenticated user to create items under a share ID before acceptance, potentially injecting content into shared folders without proper authorization.

• HIGH 7.6CVE-2026-59814public exploit available2026-09-21

  The flaw allows a low-privileged user to publish an image/svg+xml attachment with executable script content that can access same-origin data and perform actions with the victim's session if they are authenticated.

• HIGH 7.4CVE-2026-55210public exploit available2026-09-21

  The flaw allows an attacker to gain access to a local user's Joplin account by exploiting SAML authentication, potentially leading to unauthorized access or modifications of notes and settings.

• MEDIUM 4.4CVE-2026-46650public exploit available2026-09-21

  The flaw allows a low-privileged user to inject malicious JavaScript via crafted HTML notes, potentially leading to script execution in the Joplin Server origin.

• MEDIUM 5.3CVE-2026-17054public exploit available2026-09-21

  This vulnerability allows an attacker to cause a denial of service by manipulating frame lengths in control responses, leading to buffer overflows and incorrect data processing.

• MEDIUM 5.3CVE-2026-15890public exploit available2026-09-21

  The flaw involves a race condition in the nonce generation for secure storage operations, leading to nonce reuse with the same key, which can result in plaintext leakage and authentication key exposure.

• MEDIUM 4.4CVE-2026-945882026-09-21

  The flaw allows for argument injection in package changelog retrieval through improperly handled user input, posing a medium security risk.

• UNSCOREDCVE-2026-945722026-09-21
• UNSCOREDCVE-2026-945712026-09-21
• HIGH 8.8CVE-2026-944242026-09-21

  The vulnerability in Moore Threads MTT S80 Driver Package up to 340.150 allows for a heap-based buffer overflow, which can lead to remote code execution if exploited.

• MEDIUM 5.5CVE-2026-934332026-09-21

  The flaw in libstoragemgmt allows an attacker to cause a stack buffer overflow by providing malformed SCSI VPD page 0x80 data, leading to potential denial of service.

• HIGH 7.1CVE-2026-88746public exploit available2026-09-21
• MEDIUM 6.1CVE-2026-88745public exploit available2026-09-21
• UNSCOREDCVE-2026-88467public exploit available2026-09-21
• MEDIUM 5.3CVE-2026-88412public exploit available2026-09-21

  The flaw involves an integer overflow in FalkorDB's Redis module v4.20.1, allowing attackers to cause a Denial of Service via crafted input, which could disrupt service availability.

• HIGH 7.5CVE-2026-88411public exploit available2026-09-21

  The flaw involves improper error handling in FalkorDB v4.20.1's GRAPH.EFFECT component, leading to a Denial of Service (DoS). This matters because attackers can exploit it to disrupt service without needing specific privileges.

• HIGH 7.1CVE-2026-88410public exploit available2026-09-21

  The flaw in FalkorDB's graph.UDF module allows unauthorized read operations, but no write commands are registered, leading to potential data exposure and integrity issues.

• HIGH 8.8CVE-2026-88409public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) v4.20.1 to v4.20.4 involves a buffer overflow in the _Decode_GrB_Matrix function, allowing attackers to cause a Denial of Service (DoS) via crafted input. This vulnerability is significant because it can lead to service disruption without requiring user interaction.

• MEDIUM 6.5CVE-2026-88408public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) allows attackers to cause a Denial of Service via a stack overflow from a crafted input, impacting system availability.

• HIGH 7.5CVE-2026-88407public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) allows out-of-bounds read leading to Denial of Service via crafted input, posing a significant risk.

• HIGH 7.5CVE-2026-88406public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) allows attackers to cause a Denial of Service via a stack overflow from a crafted input, compromising system availability.

• CRITICAL 9.8CVE-2026-88405public exploit available2026-09-21

  The vulnerability allows attackers to execute arbitrary code via a crafted payload, posing a critical risk due to remote code execution capabilities.

• CRITICAL 9.8CVE-2026-88404public exploit available2026-09-21

  This vulnerability allows attackers to execute arbitrary code via a crafted payload, posing a critical risk due to remote code execution capabilities.