Search
450 CVEs · published 2026-07-27 to 2026-07-27
CVEs (450)
Showing 276–300 of 450
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-66390 | MEDIUM | Patched | 6.1 | 2026-07-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9… |
| CVE-2026-63077 | CRITICAL | Patched | 9.8 | 2026-07-27 | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol |
| CVE-2026-24252 | HIGH | 7.8 | 2026-07-27 | NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data… | |
| CVE-2026-17531 | MEDIUM | 5.0 | 2026-07-27 | A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the compo… | |
| CVE-2026-17192 | HIGH | 8.5 | 2026-07-27 | A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated tenant accounts to internal services that are no… | |
| CVE-2026-17191 | CRITICAL | 9.1 | 2026-07-27 | An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may resul… | |
| CVE-2026-66399 | MEDIUM | Patched | 6.5 | 2026-07-27 | phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows administrators with only group-management permissions to… |
| CVE-2026-66398 | NONE | — | 2026-07-27 | phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATION_EDIT and ATTACHME… | |
| CVE-2026-66397 | NONE | Patched | — | 2026-07-27 | phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existing_image field during category updates, allowing authenticated attackers to delete arbitrary f… |
| CVE-2026-66396 | HIGH | 8.4 | 2026-07-27 | SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when rendering Gallery and Kanban cover images, allowing stored cross-site scripting via … | |
| CVE-2026-66395 | CRITICAL | 9.6 | 2026-07-27 | SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by … | |
| CVE-2026-66394 | HIGH | 8.7 | 2026-07-27 | SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG sanitization that allows authenticated attackers to execute scripts by bypass… | |
| CVE-2026-59251 | NONE | Patched | — | 2026-07-27 | Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a… |
| CVE-2026-59250 | NONE | Patched | — | 2026-07-27 | Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remo… |
| CVE-2026-58227 | NONE | Patched | — | 2026-07-27 | The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_inc… |
| CVE-2026-55953 | NONE | Patched | — | 2026-07-27 | The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the cli… |
| CVE-2026-55737 | NONE | Patched | — | 2026-07-27 | Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) b… |
| CVE-2026-54890 | NONE | Patched | — | 2026-07-27 | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Alloc… |
| CVE-2026-51304 | HIGH | 7.5 | 2026-07-27 | sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3Ex… | |
| CVE-2026-51303 | CRITICAL | 9.8 | 2026-07-27 | A use-after-free (UAF) vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via sqlite3Ex… | |
| CVE-2026-51302 | CRITICAL | 9.8 | 2026-07-27 | SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resource… | |
| CVE-2026-51300 | CRITICAL | 9.1 | 2026-07-27 | A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object… | |
| CVE-2026-51298 | MEDIUM | 6.2 | 2026-07-27 | sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses interna… | |
| CVE-2026-51297 | HIGH | 8.8 | 2026-07-27 | sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal mem… | |
| CVE-2026-51296 | HIGH | 7.5 | 2026-07-27 | SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookup… |