Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
55255
Total
4360
Critical
16420
High
16093
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-77250 | MEDIUM | 6.1 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing … | Sep 22, 2026 |
| CVE-2026-77244 | CRITICAL | 10.0 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a … | Sep 22, 2026 |
| CVE-2026-77243 | HIGH | 8.8 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools … | Sep 22, 2026 |
| CVE-2026-77242 | HIGH | 7.5 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf checks a hostname's resolved addresses, but … | Sep 22, 2026 |
| CVE-2026-75728 | CRITICAL | 9.1 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. … | Sep 22, 2026 |
| CVE-2026-75723 | CRITICAL | 10.0 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. … | Sep 22, 2026 |
| CVE-2026-75721 | CRITICAL | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in … | Sep 22, 2026 |
| CVE-2026-75703 | CRITICAL | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in … | Sep 22, 2026 |
| CVE-2026-75699 | CRITICAL | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in … | Sep 22, 2026 |
| CVE-2026-73369 | CRITICAL | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in … | Sep 22, 2026 |
| CVE-2026-43643 | HIGH | 7.5 | Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify … | Sep 22, 2026 |
| CVE-2026-43642 | HIGH | 8.1 | Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to … | Sep 22, 2026 |
| CVE-2026-43641 | CRITICAL | 9.8 | Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to … | Sep 22, 2026 |
| CVE-2026-18626 | UNKNOWN | — | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, … | Sep 22, 2026 |
| CVE-2026-18462 | UNKNOWN | — | Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This issue affects Connext Professional: from 7.4.0 … | Sep 22, 2026 |
| CVE-2026-18461 | UNKNOWN | — | Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, … | Sep 22, 2026 |
| CVE-2026-18460 | UNKNOWN | — | Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 … | Sep 22, 2026 |
| CVE-2026-18459 | UNKNOWN | — | Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before … | Sep 22, 2026 |
| CVE-2026-18458 | UNKNOWN | — | Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows … | Sep 22, 2026 |
| CVE-2026-18457 | UNKNOWN | — | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before … | Sep 22, 2026 |
| CVE-2026-11389 | UNKNOWN | — | Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows … | Sep 22, 2026 |
| CVE-2026-11388 | UNKNOWN | — | Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6. | Sep 22, 2026 |
| CVE-2026-95818 | LOW | 3.6 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash … | Sep 22, 2026 |
| CVE-2026-94456 | CRITICAL | 9.1 | Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, … | Sep 22, 2026 |
| CVE-2026-94455 | HIGH | 7.1 | An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an explicit list … | Sep 22, 2026 |