All CVEs — page 346 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• HIGH 7.5CVE-2026-104430public exploit available2026-10-02

  Zebra nodes incorrectly count signature operations in P2SH redeem scripts, overcounting multisig signatures by 20 sigops each when they should use Zcash's accurate P2SH mode instead of legacy mode. This causes a consensus divergence where valid blocks accepted by zcashd are rejected by Zebra nodes, leading to chain stalls.

• MEDIUM 5.3CVE-2026-104429public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104428public exploit available2026-10-02
• MEDIUM 5.9CVE-2026-104427public exploit available2026-10-02
• MEDIUM 5.9CVE-2026-104426public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104425public exploit available2026-10-02
• LOW 3.7CVE-2026-104424public exploit available2026-10-02
• HIGH 7.5CVE-2026-104423public exploit available2026-10-02

  Zebra nodes are vulnerable to a resource consumption flaw where unauthenticated peers can stall block verification by submitting invalid Halo2 proofs in V6 mempool transactions. This allows attackers to flood the verification queue with zero-fee transactions, causing nodes to fall behind the chain tip and potentially halting network progress.

• HIGH 7.5CVE-2026-104422public exploit available2026-10-02

  Zebra nodes are vulnerable to a denial-of-service attack where malicious peers can delay block synchronization by manipulating the coinbase scriptSig to claim false block heights. This allows attackers to keep nodes from discovering the newest blocks, effectively stalling the blockchain sync process.

• MEDIUM 5.3CVE-2026-104421public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104420public exploit available2026-10-02
• MEDIUM 4.8CVE-2026-104419public exploit available2026-10-02
• HIGH 7.2CVE-2026-104418public exploit available2026-10-02
• MEDIUM 4.9CVE-2026-104417public exploit available2026-10-02
• HIGH 7.5CVE-2026-104416public exploit available2026-10-02

  A vulnerability in Ghost's Admin API allows staff users to view secret tokens for pending staff invites, enabling them to accept invites for higher-privileged roles and escalate their access level.

• LOW 3.1CVE-2026-104415public exploit available2026-10-02
• HIGH 8.1CVE-2026-104414public exploit available2026-10-02

  A stored cross-site scripting vulnerability exists in Ghost from 2.5.0 before 6.64.0, allowing attackers to inject malicious scripts via oEmbed photo responses, compromising admin sessions and published content.

• HIGH 7.3CVE-2026-104413public exploit available2026-10-02
• MEDIUM 4.3CVE-2026-104412public exploit available2026-10-02
• HIGH 7.3CVE-2026-104411public exploit available2026-10-02
• HIGH 7.5CVE-2026-104410public exploit available2026-10-02

  A vulnerability in SiYuan allows publish readers to access password-protected and publish-disabled database rows through the export preview API endpoint, leading to information disclosure of sensitive data that should have been restricted.

• MEDIUM 5.8CVE-2026-103763public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-103762public exploit available2026-10-02
• MEDIUM 6.4CVE-2026-978762026-10-02
• UNSCOREDCVE-2026-969902026-10-02