Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
52613
Total
4187
Critical
15589
High
15276
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-51539 | HIGH | 7.5 | A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issue stems from improper timeout management … | Jul 13, 2026 |
| CVE-2026-51538 | CRITICAL | 9.1 | EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server processes critical encapsulation commands, … | Jul 13, 2026 |
| CVE-2026-51537 | CRITICAL | 9.1 | EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can … | Jul 13, 2026 |
| CVE-2026-51536 | CRITICAL | 9.1 | In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifically, … | Jul 13, 2026 |
| CVE-2026-39042 | UNKNOWN | — | An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service … | Jul 13, 2026 |
| CVE-2026-15685 | HIGH | 7.5 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication … | Jul 13, 2026 |
| CVE-2026-15684 | HIGH | 7.3 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An … | Jul 13, 2026 |
| CVE-2026-15683 | HIGH | 7.5 | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations … | Jul 13, 2026 |
| CVE-2026-15682 | MEDIUM | 4.7 | AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must … | Jul 13, 2026 |
| CVE-2026-15681 | MEDIUM | 4.7 | AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must … | Jul 13, 2026 |
| CVE-2026-15680 | HIGH | 7.5 | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations … | Jul 13, 2026 |
| CVE-2026-15598 | MEDIUM | 6.3 | A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path … | Jul 13, 2026 |
| CVE-2026-15597 | HIGH | 7.3 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. This affects an unknown function of the file /edit_exam2.php. Performing a … | Jul 13, 2026 |
| CVE-2026-15596 | MEDIUM | 4.3 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /subject.php. Such manipulation … | Jul 13, 2026 |
| CVE-2026-58410 | HIGH | 7.1 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which allowed low-privileged users to … | Jul 13, 2026 |
| CVE-2026-58409 | CRITICAL | 9.1 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, an authenticated administrator can achieve Remote Code Execution (RCE) on the server by installing … | Jul 13, 2026 |
| CVE-2026-48364 | HIGH | 8.2 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context … | Jul 13, 2026 |
| CVE-2026-48363 | HIGH | 8.2 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context … | Jul 13, 2026 |
| CVE-2026-15595 | MEDIUM | 4.3 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /forsubject.php. This manipulation … | Jul 13, 2026 |
| CVE-2026-15594 | LOW | 3.7 | A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handler. The … | Jul 13, 2026 |
| CVE-2026-58408 | MEDIUM | 6.5 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admin/export UI and exfiltrate the entire member directory. … | Jul 13, 2026 |
| CVE-2026-58407 | UNKNOWN | — | Rejected reason: Please submit CVE requests for each vulnerability. | Jul 13, 2026 |
| CVE-2026-55773 | HIGH | 8.8 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, … | Jul 13, 2026 |
| CVE-2026-55771 | HIGH | 8.8 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equals() has … | Jul 13, 2026 |
| CVE-2026-12536 | MEDIUM | 6.4 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’ parameter in all versions up to, and including, … | Jul 13, 2026 |