Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51943
Total
4127
Critical
15407
High
15098
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2024-23571 | MEDIUM | 4.3 | HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and … | Jul 17, 2026 |
| CVE-2024-23570 | MEDIUM | 4.3 | HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulnerable application in an iFrame on … | Jul 17, 2026 |
| CVE-2024-23569 | MEDIUM | 4.3 | HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header | Jul 17, 2026 |
| CVE-2024-23568 | MEDIUM | 5.3 | HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server. Displaying version information … | Jul 17, 2026 |
| CVE-2024-23567 | MEDIUM | 4.3 | HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during … | Jul 17, 2026 |
| CVE-2024-23566 | MEDIUM | 6.5 | HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute force … | Jul 17, 2026 |
| CVE-2024-23565 | MEDIUM | 5.3 | HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor … | Jul 17, 2026 |
| CVE-2024-23564 | CRITICAL | 9.1 | HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and … | Jul 17, 2026 |
| CVE-2026-8396 | HIGH | 7.5 | Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. NetGIS allows Serialized Data External Linking. This issue affects NetGIS: from 5.0.66 before … | Jul 17, 2026 |
| CVE-2026-7189 | HIGH | 7.5 | Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue … | Jul 17, 2026 |
| CVE-2026-16014 | HIGH | 7.3 | A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the component Login Form. Performing a manipulation of … | Jul 17, 2026 |
| CVE-2026-13410 | HIGH | 8.2 | Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSL_verify_mode explicitly disabled. An attacker with network man-in-the-middle … | Jul 17, 2026 |
| CVE-2026-13082 | MEDIUM | 5.3 | GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters … | Jul 17, 2026 |
| CVE-2026-16013 | MEDIUM | 5.3 | A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. Affected by this issue is the function CipAppPath::deserialize_symbolic of the file source/src/cip/cipepath.cc. Such manipulation … | Jul 17, 2026 |
| CVE-2026-16009 | MEDIUM | 6.3 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the argument delid … | Jul 17, 2026 |
| CVE-2026-15943 | MEDIUM | 5.5 | A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an … | Jul 17, 2026 |
| CVE-2026-9602 | MEDIUM | 6.5 | Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious … | Jul 17, 2026 |
| CVE-2026-8075 | MEDIUM | 6.5 | Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user … | Jul 17, 2026 |
| CVE-2026-59695 | UNKNOWN | — | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by … | Jul 17, 2026 |
| CVE-2026-59694 | UNKNOWN | — | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a … | Jul 17, 2026 |
| CVE-2026-59252 | UNKNOWN | — | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service … | Jul 17, 2026 |
| CVE-2026-16008 | MEDIUM | 6.3 | A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled … | Jul 17, 2026 |
| CVE-2026-22104 | UNKNOWN | — | Improper access control in Hashtopolis server web-interface chunk activity component for versions prior to 0.14.8 allows any created account to read all cracked hashes of … | Jul 17, 2026 |
| CVE-2026-62764 | UNKNOWN | — | Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown … | Jul 17, 2026 |
| CVE-2026-9656 | MEDIUM | 4.3 | The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, … | Jul 17, 2026 |