Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
48821
Total
3921
Critical
14470
High
14211
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-66376 | MEDIUM | 4.2 | Credentials for a deleted user may remain valid for a short period under specific conditions. | Aug 12, 2026 |
| CVE-2026-66375 | HIGH | 8.1 | A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions. | Aug 12, 2026 |
| CVE-2026-50561 | CRITICAL | 9.4 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In … | Aug 12, 2026 |
| CVE-2026-49349 | MEDIUM | 6.8 | regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. … | Aug 12, 2026 |
| CVE-2026-49262 | LOW | 3.0 | In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack … | Aug 12, 2026 |
| CVE-2026-47234 | MEDIUM | 4.4 | Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` logs the … | Aug 12, 2026 |
| CVE-2026-47233 | MEDIUM | 6.5 | Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':` in `modules/inventory.php`. The same fix was not applied … | Aug 12, 2026 |
| CVE-2026-18171 | UNKNOWN | — | Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added … | Aug 12, 2026 |
| CVE-2026-14479 | MEDIUM | 5.5 | A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in … | Aug 12, 2026 |
| CVE-2026-14478 | HIGH | 7.8 | A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify … | Aug 12, 2026 |
| CVE-2025-59324 | UNKNOWN | — | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are … | Aug 12, 2026 |
| CVE-2025-59323 | UNKNOWN | — | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic … | Aug 12, 2026 |
| CVE-2025-59322 | UNKNOWN | — | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext. | Aug 12, 2026 |
| CVE-2025-59321 | UNKNOWN | — | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the … | Aug 12, 2026 |
| CVE-2025-59320 | MEDIUM | 4.6 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access … | Aug 12, 2026 |
| CVE-2025-59319 | HIGH | 7.2 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching … | Aug 12, 2026 |
| CVE-2026-67285 | UNKNOWN | — | Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to … | Aug 12, 2026 |
| CVE-2026-47232 | MEDIUM | 4.3 | Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` exports a PKCS#12 bundle containing the configured private … | Aug 12, 2026 |
| CVE-2026-47231 | HIGH | 8.1 | Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by checking that the actor has `hasUploadRight()` on the URL … | Aug 12, 2026 |
| CVE-2026-47230 | MEDIUM | 6.5 | Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` mode `file_rename_save` shares the same root-cause shape as the cross-folder move bug (`05-documents-cross-folder-move-idor.md`): … | Aug 12, 2026 |
| CVE-2026-47229 | MEDIUM | 5.4 | Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/sso/clients.php` validates an `adm_csrf_token` on every state-changing branch except `enable`. The `enable` case loads … | Aug 12, 2026 |
| CVE-2026-47228 | MEDIUM | 5.2 | Admidio is an open-source user management solution. `modules/registration.php` mode `send_login` regenerates a random password for `user_uuid_assigned`, stores its bcrypt hash in `adm_users.usr_password`, and emails the … | Aug 12, 2026 |
| CVE-2026-47227 | MEDIUM | 6.5 | Admidio is an open-source user management solution. `modules/categories.php` checks that the supplied `type` parameter (`ANN`, `EVT`, `ROL`, `USF`, …) corresponds to a module the actor … | Aug 12, 2026 |
| CVE-2026-16999 | MEDIUM | 6.3 | Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document … | Aug 12, 2026 |
| CVE-2025-59327 | UNKNOWN | — | In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity … | Aug 12, 2026 |