Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
25167
Total
1824
Critical
7698
High
7899
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-58029 | UNKNOWN | — | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php. This issue affects MediaWiki: from * before 1.46.0, … | Jul 01, 2026 |
| CVE-2026-58028 | UNKNOWN | — | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with … | Jul 01, 2026 |
| CVE-2026-58027 | UNKNOWN | — | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: … | Jul 01, 2026 |
| CVE-2026-58026 | UNKNOWN | — | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: … | Jul 01, 2026 |
| CVE-2026-58025 | UNKNOWN | — | Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects MediaWiki: from * … | Jul 01, 2026 |
| CVE-2026-58024 | UNKNOWN | — | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiUserrights.Php. This issue affects MediaWiki: … | Jul 01, 2026 |
| CVE-2026-57517 | CRITICAL | 9.8 | Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input … | Jul 01, 2026 |
| CVE-2026-24270 | CRITICAL | 9.8 | NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation … | Jul 01, 2026 |
| CVE-2026-24266 | MEDIUM | 5.9 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24264 | HIGH | 7.5 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this … | Jul 01, 2026 |
| CVE-2026-24260 | HIGH | 8.5 | NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might … | Jul 01, 2026 |
| CVE-2026-24251 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this … | Jul 01, 2026 |
| CVE-2026-24250 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might … | Jul 01, 2026 |
| CVE-2026-24249 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24248 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might … | Jul 01, 2026 |
| CVE-2026-24247 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24246 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this … | Jul 01, 2026 |
| CVE-2026-24245 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24244 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24243 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24242 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to … | Jul 01, 2026 |
| CVE-2026-24240 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-13707 | UNKNOWN | — | Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, … | Jul 01, 2026 |
| CVE-2026-13706 | UNKNOWN | — | Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php. | Jul 01, 2026 |
| CVE-2025-23351 | CRITICAL | 9.0 | NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out … | Jul 01, 2026 |