Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
22374
Total
1599
Critical
6838
High
7169
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-15490 | HIGH | 7.3 | A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this issue is some unknown functionality of the file proses/add.php. The … | Jul 12, 2026 |
| CVE-2026-15489 | HIGH | 7.3 | A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this vulnerability is an unknown functionality of the file proses/login.php. The manipulation of … | Jul 12, 2026 |
| CVE-2026-15488 | HIGH | 7.3 | A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can … | Jul 12, 2026 |
| CVE-2026-15487 | MEDIUM | 6.3 | A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performing a … | Jul 12, 2026 |
| CVE-2026-15486 | MEDIUM | 6.3 | A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/tools_ddns of the component Firmware Update Handler. Such … | Jul 12, 2026 |
| CVE-2026-15485 | MEDIUM | 6.3 | A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C4 of the file /goform/tools_nslookup of the component DNS Lookup … | Jul 12, 2026 |
| CVE-2026-15484 | HIGH | 8.8 | A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation … | Jul 12, 2026 |
| CVE-2026-15483 | HIGH | 8.8 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation … | Jul 12, 2026 |
| CVE-2026-15482 | HIGH | 7.3 | A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /azcall/adm/gestao_loja/sis.php?t=consultar of the component HTTP Handler. … | Jul 12, 2026 |
| CVE-2026-15481 | HIGH | 8.8 | A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component … | Jul 12, 2026 |
| CVE-2026-15480 | HIGH | 8.8 | A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such … | Jul 12, 2026 |
| CVE-2026-15479 | HIGH | 7.3 | A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the component Administrator Password … | Jul 12, 2026 |
| CVE-2026-15478 | MEDIUM | 6.3 | A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports/EmployeeAttendanceReport.php of the component UserReport Endpoint. Executing … | Jul 12, 2026 |
| CVE-2026-15477 | MEDIUM | 6.3 | A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing … | Jul 12, 2026 |
| CVE-2026-15476 | MEDIUM | 5.3 | A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component … | Jul 12, 2026 |
| CVE-2026-15475 | MEDIUM | 5.3 | A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the … | Jul 12, 2026 |
| CVE-2026-15474 | MEDIUM | 4.3 | A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Call … | Jul 12, 2026 |
| CVE-2026-15473 | MEDIUM | 6.3 | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Recorded Calls … | Jul 12, 2026 |
| CVE-2026-15472 | MEDIUM | 4.3 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/composeEmailAction.do. Executing a manipulation can lead to … | Jul 12, 2026 |
| CVE-2026-15471 | MEDIUM | 4.3 | A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci_dss_status.jsp. Performing a manipulation results in improper … | Jul 12, 2026 |
| CVE-2026-15470 | MEDIUM | 4.3 | A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation … | Jul 12, 2026 |
| CVE-2026-58281 | HIGH | 8.3 | Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | Jul 11, 2026 |
| CVE-2026-10660 | MEDIUM | 6.4 | The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single file-static net_buf_simple (att_buf, BT_ATT_MAX_ATTRIBUTE_LEN = 512 bytes) … | Jul 11, 2026 |
| CVE-2026-61870 | LOW | 2.9 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted … | Jul 11, 2026 |
| CVE-2026-61861 | LOW | 3.7 | ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling … | Jul 11, 2026 |