Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
45339
Total
3649
Critical
13458
High
13386
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-50167 | UNKNOWN | — | Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints for listing and retrieving webhook and identity … | Aug 18, 2026 |
| CVE-2026-50161 | UNKNOWN | — | libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains an integer … | Aug 18, 2026 |
| CVE-2026-50143 | HIGH | 8.1 | The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior … | Aug 18, 2026 |
| CVE-2026-49452 | MEDIUM | 6.5 | WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py when presentational_hints=True. The … | Aug 18, 2026 |
| CVE-2026-48508 | HIGH | 8.8 | Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flask_principal.Permission.__init__() with zero Need objects when ADMIN_ONLY_AUTHORITY_CREATION and LEMUR_STRICT_ROLE_ENFORCEMENT are unset … | Aug 18, 2026 |
| CVE-2026-44472 | HIGH | 8.1 | Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership … | Aug 18, 2026 |
| CVE-2026-32657 | HIGH | 7.3 | Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version … | Aug 18, 2026 |
| CVE-2026-18392 | UNKNOWN | — | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this … | Aug 18, 2026 |
| CVE-2021-43717 | UNKNOWN | — | An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. If you identify a projector equipped with an iProjection function, you can access the projector using … | Aug 18, 2026 |
| CVE-2021-43716 | UNKNOWN | — | Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB. | Aug 18, 2026 |
| CVE-2026-75924 | HIGH | 8.7 | A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, … | Aug 18, 2026 |
| CVE-2026-75897 | HIGH | 7.5 | Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote … | Aug 18, 2026 |
| CVE-2026-73372 | UNKNOWN | — | Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects contact … | Aug 18, 2026 |
| CVE-2026-73336 | UNKNOWN | — | Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup … | Aug 18, 2026 |
| CVE-2026-72531 | UNKNOWN | — | Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users … | Aug 18, 2026 |
| CVE-2026-71573 | UNKNOWN | — | Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated … | Aug 18, 2026 |
| CVE-2026-71572 | UNKNOWN | — | Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in … | Aug 18, 2026 |
| CVE-2026-70415 | HIGH | 8.1 | Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit … | Aug 18, 2026 |
| CVE-2026-69220 | UNKNOWN | — | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and … | Aug 18, 2026 |
| CVE-2026-69219 | UNKNOWN | — | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to … | Aug 18, 2026 |
| CVE-2026-67271 | CRITICAL | 9.8 | Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial … | Aug 18, 2026 |
| CVE-2026-66783 | HIGH | 8.2 | A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user … | Aug 18, 2026 |
| CVE-2026-66782 | HIGH | 7.8 | A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the … | Aug 18, 2026 |
| CVE-2026-66781 | MEDIUM | 6.5 | A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in … | Aug 18, 2026 |
| CVE-2026-63337 | UNKNOWN | — | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType … | Aug 18, 2026 |