Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
47587
Total
3849
Critical
14223
High
13906
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-49826 | UNKNOWN | — | Concourse is a container-based automation system written in Go. Prior to version 8.2.3, an attacker is able to craft and send a user a URL … | Aug 14, 2026 |
| CVE-2026-47766 | UNKNOWN | — | crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs `/dev` … | Aug 14, 2026 |
| CVE-2026-47192 | UNKNOWN | — | kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding … | Aug 14, 2026 |
| CVE-2026-47191 | UNKNOWN | — | kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID (SHA-1 or SHA-256) to … | Aug 14, 2026 |
| CVE-2026-46603 | HIGH | 7.5 | VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows … | Aug 14, 2026 |
| CVE-2026-46439 | HIGH | 7.8 | compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Server-Side Template Injection (SSTI) vulnerability exists in … | Aug 14, 2026 |
| CVE-2026-46380 | MEDIUM | 6.7 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the HTTPSFetcher._do_fetch() method passes a user-supplied URL directly to … | Aug 14, 2026 |
| CVE-2026-19845 | HIGH | 8.8 | A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of … | Aug 14, 2026 |
| CVE-2026-19844 | HIGH | 8.8 | A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a … | Aug 14, 2026 |
| CVE-2026-19841 | LOW | 3.1 | A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes … | Aug 14, 2026 |
| CVE-2026-19839 | MEDIUM | 4.7 | A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function save_doctor of the file /save_file.php. The manipulation results in … | Aug 14, 2026 |
| CVE-2026-19838 | MEDIUM | 4.3 | A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend … | Aug 14, 2026 |
| CVE-2026-19628 | HIGH | 7.2 | A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying … | Aug 14, 2026 |
| CVE-2026-19626 | CRITICAL | 9.9 | A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted … | Aug 14, 2026 |
| CVE-2023-7347 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | Aug 14, 2026 |
| CVE-2026-66272 | MEDIUM | 5.3 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially … | Aug 14, 2026 |
| CVE-2026-66271 | HIGH | 7.2 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote … | Aug 14, 2026 |
| CVE-2026-66270 | HIGH | 7.2 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote … | Aug 14, 2026 |
| CVE-2026-63702 | MEDIUM | 6.3 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially … | Aug 14, 2026 |
| CVE-2026-63701 | MEDIUM | 6.3 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could … | Aug 14, 2026 |
| CVE-2026-63700 | HIGH | 7.8 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit … | Aug 14, 2026 |
| CVE-2026-57472 | UNKNOWN | — | Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the … | Aug 14, 2026 |
| CVE-2026-57471 | UNKNOWN | — | Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the … | Aug 14, 2026 |
| CVE-2026-57469 | UNKNOWN | — | Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a … | Aug 14, 2026 |
| CVE-2026-53970 | HIGH | 7.5 | ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by … | Aug 14, 2026 |