Export limit exceeded: 394908 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (394908 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-82785 | 1 Contec | 1 Remote I/o Coupler Unit (server Type) Cpsn-mcb271-* | 2026-09-17 | 4.3 Medium |
| Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition. | ||||
| CVE-2026-82786 | 1 Contec | 1 Remote I/o Coupler Unit (server Type) Cpsn-mcb271-* | 2026-09-17 | 6.3 Medium |
| Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulnerability is exploited, sensitive information may be restored from a backup file. | ||||
| CVE-2026-82788 | 1 Contec | 1 Cpsl-08p1en | 2026-09-17 | 6.1 Medium |
| Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. | ||||
| CVE-2026-82787 | 1 Contec | 1 Cpsl-08p1en | 2026-09-17 | 9.8 Critical |
| Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a remote attacker without authentication. | ||||
| CVE-2026-82763 | 1 Contec | 14 Fxa3000, Fxa3020, Fxa3200 and 11 more | 2026-09-17 | 5.4 Medium |
| Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. | ||||
| CVE-2026-82790 | 1 Contec | 2 Pc-helper Wireless I/o Dio-0404ry-lwf, Pc-helper Wireless I/o Dio-0404ry-lwf-us | 2026-09-17 | 5.4 Medium |
| Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. | ||||
| CVE-2026-82791 | 1 Contec | 2 Can-2-usb, Can-2-wf | 2026-09-17 | 8.8 High |
| Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product. | ||||
| CVE-2026-82792 | 1 Contec | 2 Can-2-usb, Can-2-wf | 2026-09-17 | 5.2 Medium |
| Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. | ||||
| CVE-2026-82765 | 1 Contec | 14 Fxa3000, Fxa3020, Fxa3200 and 11 more | 2026-09-17 | 8.1 High |
| Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP. | ||||
| CVE-2026-82793 | 1 Contec | 2 Can-2-usb, Can-2-wf | 2026-09-17 | 7.2 High |
| Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product. | ||||
| CVE-2026-85125 | 1 Yamap | 1 Yamap | 2026-09-17 | N/A |
| The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites. | ||||
| CVE-2026-89180 | 1 Thinkingsoftware | 1 Efence | 2026-09-17 | 7.5 High |
| EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. | ||||
| CVE-2026-90890 | 1 Asrock | 2 Asrock Polychrome Sync/rgb For Mb, Asrock Polychrome Sync/rgb For Vga | 2026-09-17 | 5.5 Medium |
| ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash. | ||||
| CVE-2026-90891 | 1 Asrock | 2 Asrock Polychrome Sync/rgb For Mb, Asrock Polychrome Sync/rgb For Vga | 2026-09-17 | 5.5 Medium |
| ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot. | ||||
| CVE-2026-78299 | 1 Eclipse | 1 Eclipse Embedded Cdt | 2026-09-17 | 9.1 Critical |
| In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk. | ||||
| CVE-2026-54618 | 2026-09-17 | 9.4 Critical | ||
| Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authorization code without a login, consent, or session check, and /oauth/token can exchange that code for the static VAULT_MCP_TOKEN without authenticating a client. An unauthenticated remote caller who can reach the intended tunnel deployment can therefore call /mcp and use vault_read, vault_write, vault_search, vault_list, vault_move, and vault_delete against the entire vault. Optional PKCE does not prevent an attacker-initiated flow, and unauthenticated /oauth/register also exposes a client_credentials path by returning the configured VAULT_OAUTH_CLIENT_SECRET. This issue is fixed in version 0.2.0. | ||||
| CVE-2026-90940 | 2 201206030, Xxyopen | 2 Novel-plus, Novel-plus | 2026-09-17 | 5.3 Medium |
| novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal caches by supplying the hardcoded default value in the URL path. Attackers can trigger unauthorized cache invalidation by accessing the cache/refresh endpoint with the known default password, forcing unnecessary database queries to repopulate the cache. | ||||
| CVE-2026-82019 | 1 Triplelift | 1 Video-bundle.js | 2026-09-17 | 4.2 Medium |
| TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a publisher's domain by sending crafted postMessage payloads without origin validation. Attackers can cause a victim to visit an attacker-controlled page that sends malicious postMessage events to a publisher page running the ad script, enabling session hijacking and unauthorized DOM manipulation. | ||||
| CVE-2026-61534 | 1 Confetti | 1 Yayson | 2026-09-17 | 9.1 Critical |
| Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/store.ts and src/yayson/legacy-store.ts. A document whose type is __proto__ causes model-cache writes to modify Object.prototype, with the attacker controlling the polluted property name through id and its value through attributes. The malicious type can also be supplied by an included resource, and LegacyStore is reachable when a configured types mapping resolves to __proto__. Unsafe relationship names including __proto__, constructor, and prototype provide additional document-derived member paths. The resulting process-wide prototype pollution can cause denial of service and logic corruption; authorization bypass or code execution depends on suitable gadgets in the consuming application. This issue is fixed in version 4.3.0. | ||||
| CVE-2026-90943 | 1 Parallax | 1 Filament-comments | 2026-09-17 | 8.7 High |
| parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those comments, including administrators, enabling session token theft and unauthorized actions. | ||||