Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
50855
Total
4075
Critical
15116
High
14809
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-6336 | MEDIUM | 5.3 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-6267 | HIGH | 8.5 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-6102 | HIGH | 7.8 | MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An … | Jul 29, 2026 |
| CVE-2026-67436 | UNKNOWN | — | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish-* plugins built request URLs by concatenating … | Jul 29, 2026 |
| CVE-2026-67435 | UNKNOWN | — | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects while forwarding caller-supplied credential … | Jul 29, 2026 |
| CVE-2026-67433 | UNKNOWN | — | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migration moved a predictable … | Jul 29, 2026 |
| CVE-2026-67432 | HIGH | 7.5 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and … | Jul 29, 2026 |
| CVE-2026-67431 | UNKNOWN | — | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not … | Jul 29, 2026 |
| CVE-2026-67430 | MEDIUM | 5.3 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not … | Jul 29, 2026 |
| CVE-2026-63119 | MEDIUM | 6.2 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StdioTransport and MCP::Client::Stdio in the mcp gem … | Jul 29, 2026 |
| CVE-2026-63118 | UNKNOWN | — | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not … | Jul 29, 2026 |
| CVE-2026-5492 | MEDIUM | 6.5 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit … | Jul 29, 2026 |
| CVE-2026-5491 | HIGH | 7.5 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to … | Jul 29, 2026 |
| CVE-2026-5490 | HIGH | 8.8 | DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this … | Jul 29, 2026 |
| CVE-2026-5489 | MEDIUM | 5.3 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to … | Jul 29, 2026 |
| CVE-2026-5487 | HIGH | 7.5 | DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to … | Jul 29, 2026 |
| CVE-2026-5057 | HIGH | 7.5 | ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authentication is … | Jul 29, 2026 |
| CVE-2026-5056 | HIGH | 7.8 | GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with … | Jul 29, 2026 |
| CVE-2026-4672 | MEDIUM | 4.3 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-3093 | MEDIUM | 4.7 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-18266 | MEDIUM | 5.4 | Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction is required … | Jul 29, 2026 |
| CVE-2026-18022 | HIGH | 8.8 | Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. … | Jul 29, 2026 |
| CVE-2026-16553 | MEDIUM | 5.4 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-15975 | HIGH | 7.5 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain … | Jul 29, 2026 |
| CVE-2026-15831 | MEDIUM | 4.3 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have … | Jul 29, 2026 |