Search
23,172 CVEs
CVEs (23,172, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 326–350 of 23,172 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2026-7212 | HIGH | 7.3 | 2026-04-28 | A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of the file notes_mcp.py. The manipulation of the argum… | |
| CVE-2026-7213 | HIGH | 7.3 | 2026-04-28 | A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the file fastmcp_server.py of the component save_file Tool. The manipulation of… | |
| CVE-2026-7214 | HIGH | 7.3 | 2026-04-28 | A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability affects the function read_file/write_file/list_files/file_inf of the file src/… | |
| CVE-2026-0711 | MEDIUM | Patched | 6.8 | 2026-04-28 | A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticate… |
| CVE-2026-1460 | HIGH | Patched | 7.2 | 2026-04-28 | A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions throug… |
| CVE-2026-7215 | HIGH | 7.3 | 2026-04-28 | A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_tool of the file mcp_server.py of the component VMD Lau… | |
| CVE-2026-7216 | HIGH | 7.3 | 2026-04-28 | A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd. Impacted is an unknown function of the file processi… | |
| CVE-2026-7217 | MEDIUM | 5.3 | 2026-04-28 | A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function read_docx/read_xlsx/read_pptx/list_xlsx_sheets/read_pdf … | |
| CVE-2026-7218 | HIGH | 7.2 | 2026-04-28 | A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libap… | |
| CVE-2026-7219 | HIGH | 7.2 | 2026-04-28 | A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_nam… | |
| CVE-2026-7220 | HIGH | 7.3 | 2026-04-28 | A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts an unknown function of the file fastly-mcp.mjs of the… | |
| CVE-2026-7221 | HIGH | 7.3 | 2026-04-28 | A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-u… | |
| CVE-2026-7222 | LOW | 3.5 | 2026-04-28 | A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student… | |
| CVE-2026-7223 | HIGH | 7.3 | 2026-04-28 | A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected by this issue is the function fetch of the file packages/core/src/http/aiPro… | |
| CVE-2026-40355 | MEDIUM | Patched | 5.9 | 2026-04-28 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registe… |
| CVE-2026-42510 | MEDIUM | Patched | 6.6 | 2026-04-28 | OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface. |
| CVE-2026-6551 | MEDIUM | 6.4 | 2026-04-28 | The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blocks b… | |
| CVE-2026-6725 | MEDIUM | 6.4 | 2026-04-28 | The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcsm_text_rotator` shortcode in a… | |
| CVE-2026-6809 | MEDIUM | 6.4 | 2026-04-28 | The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is d… | |
| CVE-2026-7224 | HIGH | 7.3 | 2026-04-28 | A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /admin/ajax.php?action=delete_cart. Pe… | |
| CVE-2026-7225 | HIGH | 7.3 | 2026-04-28 | A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function delete_menu of the file /admin/ajax.php?action=delete… | |
| CVE-2026-7226 | HIGH | 7.3 | 2026-04-28 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the function login2 of the file /admin/ajax.php?action=login2.… | |
| CVE-2026-7227 | HIGH | 7.3 | 2026-04-28 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of th… | |
| CVE-2026-7228 | HIGH | 7.3 | 2026-04-28 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count.… | |
| CVE-2026-40356 | MEDIUM | Patched | 5.9 | 2026-04-28 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with… |