Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
46113
Total
3679
Critical
13638
High
13568
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-19966 | MEDIUM | 5.4 | A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the … | Aug 17, 2026 |
| CVE-2026-19965 | LOW | 3.7 | A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. … | Aug 17, 2026 |
| CVE-2026-19964 | MEDIUM | 5.5 | A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The manipulation of the … | Aug 17, 2026 |
| CVE-2026-19963 | HIGH | 7.4 | A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the … | Aug 17, 2026 |
| CVE-2026-19962 | HIGH | 7.4 | A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of … | Aug 17, 2026 |
| CVE-2026-19961 | CRITICAL | 9.9 | A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results … | Aug 16, 2026 |
| CVE-2026-19960 | HIGH | 7.4 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac … | Aug 16, 2026 |
| CVE-2026-19959 | CRITICAL | 9.9 | A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes … | Aug 16, 2026 |
| CVE-2026-19958 | MEDIUM | 6.3 | A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the … | Aug 16, 2026 |
| CVE-2026-19957 | MEDIUM | 6.3 | A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpoint. Such manipulation of … | Aug 16, 2026 |
| CVE-2026-19956 | MEDIUM | 6.3 | A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_pagination_url of the file server.py. Such manipulation leads to server-side … | Aug 16, 2026 |
| CVE-2026-19955 | LOW | 3.5 | A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in … | Aug 16, 2026 |
| CVE-2026-74797 | LOW | 3.1 | OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. … | Aug 16, 2026 |
| CVE-2026-74796 | MEDIUM | 6.1 | OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a malicious symlink in a trusted working … | Aug 16, 2026 |
| CVE-2026-74795 | HIGH | 7.5 | Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit (the ExpressionDepthLimit property … | Aug 16, 2026 |
| CVE-2026-74794 | HIGH | 7.5 | Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to … | Aug 16, 2026 |
| CVE-2026-74792 | HIGH | 7.5 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path … | Aug 16, 2026 |
| CVE-2026-74791 | HIGH | 8.6 | Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent … | Aug 16, 2026 |
| CVE-2026-74790 | CRITICAL | 9.1 | Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can … | Aug 16, 2026 |
| CVE-2026-74789 | HIGH | 7.5 | Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and … | Aug 16, 2026 |
| CVE-2026-74788 | HIGH | 7.5 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string.pad_left and string.pad_right template functions, which perform no validation on … | Aug 16, 2026 |
| CVE-2026-74787 | HIGH | 7.5 | Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks depth limits and circular reference detection. Attackers can craft templates … | Aug 16, 2026 |
| CVE-2026-74786 | MEDIUM | 6.5 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString safety limit (default 1MB) can be bypassed because ObjectToString resets … | Aug 16, 2026 |
| CVE-2026-74785 | MEDIUM | 6.5 | Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and … | Aug 16, 2026 |
| CVE-2026-74784 | UNKNOWN | — | Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers … | Aug 16, 2026 |