Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
91,183 matching · page 246/1824Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-10528(opens NVD record) | Low | 3.3 | A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This issue affects the function DcmItem::read of the file OrthancFramework/Sources/DicomParsing/FromDcmtkBridge.cpp of the component DCMTK Parser. Performing a manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The patch is named bae99026ca97. To fix this issue, it is recommended to deploy a patch. | Jun 2, 2026 |
| CVE-2026-10514(opens NVD record) | Low | 2.4 | A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 1.7.0 mitigates this issue. The identifier of the patch is c87682afa8df79853299f75489c9d333f7bc5fce. It is suggested to upgrade the affected component. | Jun 2, 2026 |
| CVE-2026-10302(opens NVD record) | Medium | 6.3 | A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the file /manage_fee.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. | Jun 2, 2026 |
| CVE-2026-10301(opens NVD record) | Medium | 4.3 | A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argument page results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be used. | Jun 2, 2026 |
| CVE-2026-28511(opens NVD record) | Medium | 4.3 | eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited (only the title). Attempts to access the underlying protected resource content remain blocked by authorization checks. Version 5.4.2 fixes the issue. # Affected Scope Cross-scope visibility of titles. No confirmed bypass of content-level access controls # Preconditions An authenticated user account No special privileges required beyond standard access # Impact This may enable unauthorized disclosure of sensitive information if confidential data is included in resource titles. Examples could include project names, patient identifiers, or other regulated information embedded in titles. | Jun 1, 2026 |
| CVE-2026-25879(opens NVD record) | Critical | 9.8 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent executes SQL produced by an LLM, which is influenceable by prompt injection. When configured with a database role that has privileges enabling code execution or filesystem access (e.g., PostgreSQL pg_execute_server_program, MySQL FILE, MSSQL xp_cmdshell), an attacker who can shape the agent's input — including indirectly via data returned to the LLM — can coerce execution of dialect-specific primitives such as `COPY ... FROM PROGRAM`, achieving RCE on the database host. Fixed in v0.63.0 by defaulting SQLChatAgent to a SELECT-only sqlglot-parsed statement allowlist with a dialect-aware dangerous-pattern blocklist; allow_dangerous_operations=True restores the previous unrestricted behavior for trusted deployments. | Jun 1, 2026 |
| CVE-2026-25277(opens NVD record) | High | 8.8 | Memory corruption while using Strongbox due to buffer overflow. | Jun 1, 2026 |
| CVE-2026-25276(opens NVD record) | High | 8.8 | Memory corruption while using Strongbox due to missing bounds check. | Jun 1, 2026 |
| CVE-2026-25260(opens NVD record) | High | 7.8 | Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications. | Jun 1, 2026 |
| CVE-2026-25259(opens NVD record) | High | 7.8 | Memory corruption while processing multiple IOCTL command for escape operations. | Jun 1, 2026 |
| CVE-2026-25258(opens NVD record) | High | 7.8 | Memory corruption while processing IOCTL calls for escape operations. | Jun 1, 2026 |
| CVE-2026-24782(opens NVD record) | High | 7.6 | Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBuilder role to retrieve information on or modify other users' form definitions and some global configuration parameters. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. | Jun 1, 2026 |
| CVE-2026-24761(opens NVD record) | Low | 3.7 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metadata of resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. | Jun 1, 2026 |
| CVE-2026-24756(opens NVD record) | Medium | 4.3 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. | Jun 1, 2026 |
| CVE-2026-24755(opens NVD record) | Medium | 5.4 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. | Jun 1, 2026 |
| CVE-2026-24754(opens NVD record) | Medium | 5.4 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated attacker to execute arbitrary JavaScript code in other users' sessions. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. | Jun 1, 2026 |
| CVE-2026-24753(opens NVD record) | Medium | 6.5 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. | Jun 1, 2026 |
| CVE-2026-24752(opens NVD record) | High | 8.2 | Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user into executing arbitrary JavaScript code. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. | Jun 1, 2026 |
| CVE-2026-24092(opens NVD record) | High | 7.2 | Memory Corruption when processing fastboot commands to set display mode. | Jun 1, 2026 |
| CVE-2026-24091(opens NVD record) | High | 7.2 | Memory corruption while processing fastboot commands with improperly formatted input. | Jun 1, 2026 |
| CVE-2026-24090(opens NVD record) | High | 7.1 | Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. | Jun 1, 2026 |
| CVE-2026-24089(opens NVD record) | High | 7.2 | Memory corruption while processing fastboot commands with invalid input. | Jun 1, 2026 |
| CVE-2026-24088(opens NVD record) | High | 8.2 | Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. | Jun 1, 2026 |
| CVE-2026-24087(opens NVD record) | High | 7.2 | Memory corruption while processing fastboot OEM commands. | Jun 1, 2026 |
| CVE-2026-24085(opens NVD record) | High | 7.2 | Memory Corruption when processing display command line information due to improper initialization of a variable. | Jun 1, 2026 |
| CVE-2026-10300(opens NVD record) | Low | 3.7 | A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTTP Endpoint. Such manipulation of the argument lora_path leads to reachable assertion. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance. | Jun 1, 2026 |
| CVE-2026-10299(opens NVD record) | Low | 3.8 | A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulation of the argument delid causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. | Jun 1, 2026 |
| CVE-2026-10298(opens NVD record) | Low | 3.3 | A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. | Jun 1, 2026 |
| CVE-2026-10297(opens NVD record) | Medium | 6.3 | A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /manage_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. | Jun 1, 2026 |
| CVE-2026-10296(opens NVD record) | Medium | 6.3 | A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. | Jun 1, 2026 |
| CVE-2026-10295(opens NVD record) | Low | 3.3 | A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py. Performing a manipulation of the argument name/comment results in denial of service. The attack requires a local approach. The exploit has been made public and could be used. | Jun 1, 2026 |
| CVE-2025-59614(opens NVD record) | Medium | 6.7 | Memory Corruption when sending random number generator command with insufficient output buffer size. | Jun 1, 2026 |
| CVE-2025-59613(opens NVD record) | Medium | 6.7 | Memory Corruption when output buffer size is smaller than input buffer size during data copying operation. | Jun 1, 2026 |
| CVE-2025-59612(opens NVD record) | Medium | 6.7 | Memory corruption in windows drivers while sending incorrect trusted application request | Jun 1, 2026 |
| CVE-2025-59611(opens NVD record) | Medium | 6.7 | Memory corruption in diagnostic services due to absence of input validation | Jun 1, 2026 |
| CVE-2025-59610(opens NVD record) | Medium | 6.4 | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. | Jun 1, 2026 |
| CVE-2025-59609(opens NVD record) | Medium | 5.5 | Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. | Jun 1, 2026 |
| CVE-2025-59606(opens NVD record) | High | 7.8 | Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization. | Jun 1, 2026 |
| CVE-2025-59605(opens NVD record) | High | 7.8 | Memory Corruption when processing device identifier strings that exceed the expected maximum length. | Jun 1, 2026 |
| CVE-2025-59604(opens NVD record) | High | 7.8 | Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. | Jun 1, 2026 |
| CVE-2025-59601(opens NVD record) | Medium | 6.5 | Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration. | Jun 1, 2026 |
| CVE-2019-25718(opens NVD record) | High | 8.4 | Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause the device to display incorrect or no information from the connected Delta Family patient monitor. | Jun 1, 2026 |
| CVE-2026-49491(opens NVD record) | High | 8.2 | Pixa Bank 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive data by injecting SQL code into the 'rib' parameter. Attackers can send POST requests to the agence-ajax.php endpoint with UNION-based SQL payloads to retrieve user information including names, email addresses, and phone numbers from the database. | Jun 1, 2026 |
| CVE-2026-40965(opens NVD record) | Critical | 10.0 | Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are inadvertently exposed through the public /token_keys endpoint. This endpoint is designed to provide public key material for JWT token verification but incorrectly exposes private key components for EC keys. The vulnerability affects deployments using EC keys for JWT token signing. The vulnerability does not affect RSA key configurations, only deployments using EC keys for JWT signing. Affected versions: - uaa_release: v76.12.0 through v78.12.0 (inclusive); fixed in v78.13.0 or later - CF Deployment: v30.0.0 through v56.0.0 (inclusive); fixed in v56.1.0 or later (bundles uaa_release v78.13.0) | Jun 1, 2026 |
| CVE-2026-40964(opens NVD record) | High | 7.5 | Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token. Affected versions: - log-cache_release: all versions through v3.2.6 (inclusive); fixed in v3.2.7 or later - CF Deployment: all versions through v55.?.0 (inclusive); fixed in v55.?.0 or later (bundles log-cache_release v3.2.7) | Jun 1, 2026 |
| CVE-2026-28586(opens NVD record) | Low | 3.3 | In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Jun 1, 2026 |
| CVE-2026-28581(opens NVD record) | Medium | 4.0 | In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with null execution privileges needed. User interaction is null for exploitation. | Jun 1, 2026 |
| CVE-2026-28580(opens NVD record) | High | 7.8 | In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Jun 1, 2026 |
| CVE-2026-28578(opens NVD record) | Medium | 5.5 | In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Jun 1, 2026 |
| CVE-2026-28577(opens NVD record) | High | 7.8 | In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Jun 1, 2026 |