Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
50663
Total
4071
Critical
15059
High
14768
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-16728 | MEDIUM | 4.8 | undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume … | Jul 29, 2026 |
| CVE-2026-13309 | MEDIUM | 6.8 | Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected … | Jul 29, 2026 |
| CVE-2026-13308 | HIGH | 8.1 | Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of … | Jul 29, 2026 |
| CVE-2026-13307 | MEDIUM | 6.8 | Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected … | Jul 29, 2026 |
| CVE-2026-13306 | MEDIUM | 4.3 | Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC … | Jul 29, 2026 |
| CVE-2026-13305 | MEDIUM | 6.4 | Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary … | Jul 29, 2026 |
| CVE-2025-65340 | UNKNOWN | — | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php. | Jul 29, 2026 |
| CVE-2025-65337 | UNKNOWN | — | Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) in pageEditMember.php via the address field. | Jul 29, 2026 |
| CVE-2026-6336 | MEDIUM | 5.3 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-6267 | HIGH | 8.5 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-6102 | HIGH | 7.8 | MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An … | Jul 29, 2026 |
| CVE-2026-67436 | UNKNOWN | — | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish-* plugins built request URLs by concatenating … | Jul 29, 2026 |
| CVE-2026-67435 | UNKNOWN | — | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects while forwarding caller-supplied credential … | Jul 29, 2026 |
| CVE-2026-67433 | UNKNOWN | — | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migration moved a predictable … | Jul 29, 2026 |
| CVE-2026-67432 | HIGH | 7.5 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and … | Jul 29, 2026 |
| CVE-2026-67431 | UNKNOWN | — | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not … | Jul 29, 2026 |
| CVE-2026-67430 | MEDIUM | 5.3 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not … | Jul 29, 2026 |
| CVE-2026-63119 | MEDIUM | 6.2 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StdioTransport and MCP::Client::Stdio in the mcp gem … | Jul 29, 2026 |
| CVE-2026-63118 | UNKNOWN | — | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not … | Jul 29, 2026 |
| CVE-2026-5492 | MEDIUM | 6.5 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit … | Jul 29, 2026 |
| CVE-2026-5491 | HIGH | 7.5 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to … | Jul 29, 2026 |
| CVE-2026-5490 | HIGH | 8.8 | DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this … | Jul 29, 2026 |
| CVE-2026-5489 | MEDIUM | 5.3 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to … | Jul 29, 2026 |
| CVE-2026-5487 | HIGH | 7.5 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to … | Jul 29, 2026 |
| CVE-2026-5057 | HIGH | 7.5 | ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authentication is … | Jul 29, 2026 |