Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
11537
Total
770
Critical
3263
High
3665
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-7674 | HIGH | 8.8 | A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects the function start_single_service of the component Web Management Interface. … | May 03, 2026 |
| CVE-2026-7673 | MEDIUM | 4.7 | A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-service/src/main/java/com/zbkj/service/service/impl/UploadServiceImpl.java of the component Admin Upload. Performing a … | May 03, 2026 |
| CVE-2026-40561 | UNKNOWN | — | Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are … | May 03, 2026 |
| CVE-2026-7672 | MEDIUM | 6.3 | A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList of the file src/main/java/com/youlai/boot/system/controller/UserController.java of the component Users … | May 03, 2026 |
| CVE-2026-7671 | LOW | 3.7 | A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. … | May 03, 2026 |
| CVE-2026-7670 | HIGH | 7.3 | A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument … | May 02, 2026 |
| CVE-2026-6481 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | May 02, 2026 |
| CVE-2026-7669 | MEDIUM | 5.6 | A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_utils.py of the component HuggingFace Transformer Handler. … | May 02, 2026 |
| CVE-2026-7668 | HIGH | 7.3 | A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation … | May 02, 2026 |
| CVE-2026-7653 | MEDIUM | 6.3 | A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_in_browser of the file src/index.ts of the component MCP … | May 02, 2026 |
| CVE-2026-7645 | MEDIUM | 6.5 | A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_state of the file src/consciousness-explorer/mcp/server.js of the component MCP Interface. … | May 02, 2026 |
| CVE-2026-7644 | HIGH | 7.3 | A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper … | May 02, 2026 |
| CVE-2026-7643 | MEDIUM | 4.3 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. … | May 02, 2026 |
| CVE-2026-7642 | MEDIUM | 6.3 | A vulnerability was detected in pskill9 website-downloader up to 0.1.0. This affects the function download_website of the file src/index.ts of the component MCP Interface. Performing … | May 02, 2026 |
| CVE-2026-7633 | MEDIUM | 6.5 | A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument FileName leads to … | May 02, 2026 |
| CVE-2026-7632 | HIGH | 7.3 | A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the argument … | May 02, 2026 |
| CVE-2026-7631 | MEDIUM | 5.4 | A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation … | May 02, 2026 |
| CVE-2026-7630 | HIGH | 7.3 | A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServiceProvider.php of the component … | May 02, 2026 |
| CVE-2026-7629 | MEDIUM | 6.3 | A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1. Impacted is the function runCodeReviewTool of the file src/tools/codeReview.ts of the component Ccode-Review Tool. … | May 02, 2026 |
| CVE-2026-3504 | MEDIUM | 5.3 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.1 … | May 02, 2026 |
| CVE-2026-2554 | HIGH | 8.1 | The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all … | May 02, 2026 |
| CVE-2026-0703 | MEDIUM | 6.4 | The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xlwcty_current_date' shortcode in all … | May 02, 2026 |
| CVE-2026-7628 | MEDIUM | 6.3 | A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0. This issue affects the function executeRepomix of the file src/repomix.ts of the component RepoMix Command … | May 02, 2026 |
| CVE-2026-6817 | MEDIUM | 5.8 | The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter in all versions up to, and including, … | May 02, 2026 |
| CVE-2026-6525 | MEDIUM | 5.5 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 | May 02, 2026 |