Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
25167
Total
1824
Critical
7698
High
7899
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-43965 | UNKNOWN | — | Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by LocalPackages::read_from_disc are passed without … | Jun 02, 2026 |
| CVE-2026-42795 | UNKNOWN | — | Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection … | Jun 02, 2026 |
| CVE-2026-41918 | MEDIUM | 5.7 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an … | Jun 02, 2026 |
| CVE-2026-39555 | HIGH | 8.1 | Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1. | Jun 02, 2026 |
| CVE-2026-39553 | HIGH | 8.1 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Local File Inclusion. This issue … | Jun 02, 2026 |
| CVE-2026-39552 | HIGH | 8.1 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Supply Co. Blueprint allows PHP Local File Inclusion. … | Jun 02, 2026 |
| CVE-2026-35717 | UNKNOWN | — | A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a … | Jun 02, 2026 |
| CVE-2026-32685 | UNKNOWN | — | Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages … | Jun 02, 2026 |
| CVE-2026-32250 | MEDIUM | 4.3 | NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in version 2.2.4 in the id parameter of the endpoint … | Jun 02, 2026 |
| CVE-2026-28116 | MEDIUM | 5.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emilia Projects Progress Planner allows Stored XSS. This issue affects Progress Planner: from … | Jun 02, 2026 |
| CVE-2026-27351 | MEDIUM | 5.4 | Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crew HRM: from n/a through 1.2.2. | Jun 02, 2026 |
| CVE-2026-10622 | HIGH | 8.2 | Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints. | Jun 02, 2026 |
| CVE-2026-10621 | HIGH | 7.5 | Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly … | Jun 02, 2026 |
| CVE-2026-10611 | UNKNOWN | — | An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments configured with LdapAuth.mixedAuth=true and Security.require_otp=true, users authenticated … | Jun 02, 2026 |
| CVE-2025-69369 | HIGH | 8.1 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This issue … | Jun 02, 2026 |
| CVE-2025-68886 | HIGH | 8.1 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in androThemes Cookiteer allows PHP Local File Inclusion. This issue … | Jun 02, 2026 |
| CVE-2025-58897 | HIGH | 8.1 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion. This issue … | Jun 02, 2026 |
| CVE-2025-58707 | HIGH | 8.1 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion. This issue … | Jun 02, 2026 |
| CVE-2019-25719 | HIGH | 8.6 | Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0.3, and lower contain network message handling vulnerabilities that allow … | Jun 02, 2026 |
| CVE-2019-25717 | MEDIUM | 4.3 | Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a … | Jun 02, 2026 |
| CVE-2026-8993 | MEDIUM | 6.5 | D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to … | Jun 02, 2026 |
| CVE-2026-42685 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS. This issue affects WP Job Portal: … | Jun 02, 2026 |
| CVE-2026-42684 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects … | Jun 02, 2026 |
| CVE-2026-42670 | HIGH | 7.5 | Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Five Star … | Jun 02, 2026 |
| CVE-2026-42669 | HIGH | 7.5 | Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0. | Jun 02, 2026 |