Export limit exceeded: 414953 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414953 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-89310 | 1 Jtl-software | 1 Jtl-wms | 2026-10-26 | 9.9 Critical |
| A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account. | ||||
| CVE-2026-103671 | 1 Ec-cube | 1 Amazonpay V2 Plugin | 2026-10-26 | N/A |
| External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained. | ||||
| CVE-2026-73792 | 1 Hpe | 1 Nonstop Java Jtoolkit | 2026-10-26 | 3.8 Low |
| A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow. | ||||
| CVE-2026-73795 | 1 Hpe | 1 Nonstop Tmf Auditread2 | 2026-10-26 | 6.4 Medium |
| A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service. | ||||
| CVE-2026-107424 | 2 M A Vinoth Kumar, Wordpress-extensions | 2 Frontend Dashboard, Frontend Dashboard | 2026-10-26 | 9.8 Critical |
| Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7. | ||||
| CVE-2026-16741 | 1 Tr7 Cyber defense Inc. | 1 Tr7 Asp | 2026-10-26 | 9.8 Critical |
| Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331. | ||||
| CVE-2026-16740 | 1 Tr7 Cyber defense Inc. | 1 Tr7 Asp | 2026-10-26 | 9.8 Critical |
| Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331. | ||||
| CVE-2026-110259 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service through crafted class files. Attackers can supply a class with a large method containing many long forward jumps, triggering unbounded toByteArray() recursion and a StackOverflowError during transformation. | ||||
| CVE-2026-110261 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames() fix point algorithm converge slowly, tying up transforming threads for unbounded time. | ||||
| CVE-2026-110262 | 1 Ow2 | 1 Asm | 2026-10-26 | 3.3 Low |
| OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in forwardJumpStackFrames and allocation of hundreds of megabytes, leading to denial of service. | ||||
| CVE-2026-110263 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type arguments to trigger a StackOverflowError during class transformation, causing denial of service. | ||||
| CVE-2026-110270 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory or work limits. Attackers can supply a crafted class file with nested subroutines to force O(2^n) memory allocation, causing an OutOfMemoryError that crashes the JVM. | ||||
| CVE-2026-110594 | 1 Micropyramid | 2 Bottlecrm, Django Crm | 2026-10-26 | 4.9 Medium |
| BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers via unbounded routing rule regex patterns. Attackers can create a routing rule with a catastrophically backtracking pattern evaluated by _match_condition() during case saves, exhausting workers shared across all tenants. | ||||
| CVE-2026-110603 | 1 Rapidlasso | 1 Laszip | 2026-10-26 | 6.3 Medium |
| LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C API, crashes the process and corrupts the heap. | ||||
| CVE-2026-110607 | 1 Bizspring | 2 Bizspring Java Mall, Bizspring Shop | 2026-10-26 | 6.5 Medium |
| BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request /member/payment/test_post_pay_{paymentLogSn} to obtain goods without paying or settle other members' orders. | ||||
| CVE-2026-110608 | 1 Bizspring | 2 Bizspring Java Mall, Bizspring Shop | 2026-10-26 | 5.4 Medium |
| BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that allows authenticated members to act on other members' orders by supplying their orderId. Attackers can cancel victims' pending orders to release allocated stock or confirm receipt of shipped orders, advancing fulfilment and settlement without the victim's consent. | ||||
| CVE-2026-110612 | 1 Wwwlike | 1 Vlife | 2026-10-26 | 9.8 Critical |
| vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on vlife instances. | ||||
| CVE-2026-110614 | 1 Yiuman | 1 Citrus | 2026-10-26 | 6.5 Medium |
| Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending BaseQueryController or BaseQueryRestful to append unvalidated SQL to the ORDER BY clause and extract database contents using boolean- or time-based blind techniques. | ||||
| CVE-2026-110616 | 1 Nullclaw | 1 Nullhub | 2026-10-26 | 8.1 High |
| NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token field defaults to null and is never assigned. Attackers sending requests without Authorization or Origin headers to non-loopback listeners can control agent instances, rewrite configurations including provider credentials, and manage cron jobs and MCP servers. | ||||
| CVE-2026-110618 | 1 Pppscn | 1 Smsforwarder | 2026-10-26 | 8.1 High |
| SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or overwrite configuration via the clone API. | ||||