Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
47882
Total
3850
Critical
14243
High
13921
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-13048 | HIGH | 8.2 | Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into … | Aug 13, 2026 |
| CVE-2022-4993 | CRITICAL | 9.1 | HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request … | Aug 13, 2026 |
| CVE-2026-73671 | MEDIUM | 6.1 | Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or … | Aug 13, 2026 |
| CVE-2026-73670 | HIGH | 7.2 | A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM … | Aug 13, 2026 |
| CVE-2026-73576 | MEDIUM | 6.3 | In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number … | Aug 13, 2026 |
| CVE-2026-73575 | LOW | 3.1 | In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due … | Aug 13, 2026 |
| CVE-2026-73574 | LOW | 3.1 | In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu … | Aug 13, 2026 |
| CVE-2026-73573 | LOW | 3.1 | In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages … | Aug 13, 2026 |
| CVE-2026-73572 | MEDIUM | 6.1 | In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific … | Aug 13, 2026 |
| CVE-2026-73571 | LOW | 3.1 | An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can … | Aug 13, 2026 |
| CVE-2026-73570 | HIGH | 8.9 | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due … | Aug 13, 2026 |
| CVE-2026-73559 | MEDIUM | 6.5 | vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRequest.prompt field in vllm/entrypoints/openai/completion/protocol.py accepts an unbounded list[str] … | Aug 13, 2026 |
| CVE-2026-73533 | CRITICAL | 9.8 | Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build … | Aug 13, 2026 |
| CVE-2026-73532 | CRITICAL | 9.8 | Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build … | Aug 13, 2026 |
| CVE-2026-73515 | HIGH | 8.1 | PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. … | Aug 13, 2026 |
| CVE-2026-73514 | HIGH | 8.8 | The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to … | Aug 13, 2026 |
| CVE-2026-55401 | UNKNOWN | — | CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a … | Aug 13, 2026 |
| CVE-2026-55400 | UNKNOWN | — | CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a … | Aug 13, 2026 |
| CVE-2026-19744 | UNKNOWN | — | Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown … | Aug 13, 2026 |
| CVE-2026-19710 | HIGH | 7.3 | A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view_department.php. Performing a manipulation … | Aug 13, 2026 |
| CVE-2026-19487 | MEDIUM | 5.3 | Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass. The … | Aug 13, 2026 |
| CVE-2026-73558 | MEDIUM | 5.3 | vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu … | Aug 13, 2026 |
| CVE-2026-73557 | UNKNOWN | — | vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safe_load_prompt_embeds in vllm/renderers/embed_utils.py uses torch.sparse.check_sparse_tensor_invariants, whose process-global save, enable, and … | Aug 13, 2026 |
| CVE-2026-73556 | MEDIUM | 5.3 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structured_outputs.regex parameter in vllm/v1/structured_output/backend_lm_format_enforcer.py is passed to lmformatenforcer.RegexParser without compile_regex_with_timeout … | Aug 13, 2026 |
| CVE-2026-73555 | MEDIUM | 5.3 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validation_exception_handler in vllm/entrypoints/openai/server_utils.py converts FastAPI RequestValidationError objects with str(exc), and … | Aug 13, 2026 |