Export limit exceeded: 370647 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 370647 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (370647 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-15615 | 2026-07-27 | 7.5 High | ||
| Logto omits validation of the SAML <Conditions> element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely. | ||||
| CVE-2026-9765 | 1 Grafana | 1 Grafana | 2026-07-27 | 7.1 High |
| Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Controls are “Broken” when a user can access resources they are not authorized to access. An attacker can bypass any access control mechanisms in a web application, and gain unauthorized access to resources that are not available with their permissions. Broken access control can allow attackers to: Access resources only accessible to certain users, thus allowing unauthorized access to data Perform operations on behalf of other users, leading to account takeovers in the worst cases Attempt privilege escalation Attempt to take over an account | ||||
| CVE-2026-17048 | 1 Redhat | 6 Build Keycloak, Data Grid, Jboss Data Grid and 3 more | 2026-07-27 | 5.5 Medium |
| A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets that are stored in a secure vault. Due to improper boundary enforcement, a delegated administrator with view-only permissions can retrieve the actual resolved secret instead of the vault placeholder, leading to the exposure of sensitive credentials. | ||||
| CVE-2026-12496 | 1 Loytec | 8 L-dali, L-gate, L-inx and 5 more | 2026-07-27 | N/A |
| Stored Cross-Site Scripting (CWE-79) in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an administrator's browser (session hijacking, credential theft, device reconfiguration) via a crafted `User-Agent` header in a `POST /da` request. | ||||
| CVE-2026-12502 | 1 Loytec | 8 L-dali, L-gate, L-inx and 5 more | 2026-07-27 | N/A |
| Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to reset the password of any LARM user (including the `larmapp` service account) via the `set-passwd` subcommand. | ||||
| CVE-2026-12503 | 1 Loytec | 8 L-dali, L-gate, L-inx and 5 more | 2026-07-27 | N/A |
| Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated `larmapp` attacker to make `/etc/passwd` writable by the `larmapp` group (leading to root privilege escalation) via a symlink attack on `/etc/lighttpd/ssl/server.pem`. | ||||
| CVE-2026-12504 | 1 Loytec | 8 L-dali, L-gate, L-inx and 5 more | 2026-07-27 | N/A |
| Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local attacker to authenticate as a uid=0 account without a password and obtain a root shell via an `/etc/passwd` entry with an empty password field. | ||||
| CVE-2026-55728 | 1 Loytec | 8 L-dali, L-gate, L-inx and 5 more | 2026-07-27 | N/A |
| Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly long interface-name argument. | ||||
| CVE-2026-55731 | 1 Loytec | 8 L-dali, L-gate, L-inx and 5 more | 2026-07-27 | N/A |
| Unchecked input for loop condition (CWE-606) in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service (CPU exhaustion) via a crafted SNMP GETNEXT request with a large OID component. | ||||
| CVE-2026-55732 | 1 Loytec | 8 L-dali, L-gate, L-inx and 5 more | 2026-07-27 | N/A |
| Out-of-bounds Read (CWE-125) in BACnet packet parsing (`bacdt_datetime_to_tod`) in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash `linx_a64.exe` and ultimately reboot the device via a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet with an invalid month value. The same vulnerability affects multiple other Loytec products. | ||||
| CVE-2026-49326 | 1 Apache | 1 Hbase | 2026-07-27 | 6.5 Medium |
| Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetch(possible multiple times), close. The open step will return an id which will be passed back to server for identifying the scanner instances stored at server side. We missed the owner check in fetch and close steps which means a user can fetch rows from the scanner which is opened by other users, and close scanners which belongs to other users. This issue affects Apache HBase:from 3.0.0-alpha-1 through 3.0.0-beta-1, from 2.6.0 through 2.6.5, from 2.5.0 through 2.5.14, through 2.4.*. Users are recommended to upgrade to version 3.0.0-beta-2, 2.6.6 and 2.5.15, which fixes the issue. | ||||
| CVE-2026-60135 | 1 Weintek | 2 Cmt3092x Firmware, Easyweb | 2026-07-27 | 6.5 Medium |
| An attacker can modify data that should be restricted to read‑only access. | ||||
| CVE-2026-61886 | 1 Weintek | 2 Cmt3092x Firmware, Easyweb | 2026-07-27 | 6.5 Medium |
| Weintek cMT3092X HMI stores user account passwords in plaintext. | ||||
| CVE-2026-61892 | 1 Weintek | 2 Cmt3092x Firmware, Easyweb | 2026-07-27 | 8.8 High |
| Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. | ||||
| CVE-2026-60134 | 1 Weintek | 2 Cmt3092x Firmware, Easyweb | 2026-07-27 | 8.8 High |
| Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges. | ||||
| CVE-2026-66339 | 2 Libsoup, Redhat | 2 Libsoup, Enterprise Linux | 2026-07-27 | 6.5 Medium |
| A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure. | ||||
| CVE-2026-66338 | 2 Libsoup, Redhat | 2 Libsoup, Enterprise Linux | 2026-07-27 | 5.4 Medium |
| A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend proxy, this parsing differential can be exploited to smuggle HTTP requests. | ||||
| CVE-2026-17501 | 2 Ggml, Ggml-org | 2 Llama.cpp, Llama.cpp | 2026-07-27 | 5.3 Medium |
| A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes allocation of resources. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance. | ||||
| CVE-2026-14827 | 2 Calendar, Wordpress | 2 Calendar, Wordpress | 2026-07-27 | N/A |
| The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calendar. | ||||
| CVE-2026-14837 | 1 Lenze | 7 C430, C4xx Firmware, C550 and 4 more | 2026-07-27 | 7.8 High |
| Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise. | ||||