01 Record index

CVE records

377,227 records mirrored · sorted by most recently published

02 Records

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-198266.9Medium–6.9Mediumalldatacenter alldata xxl-rpc Listener HessianSerializer.java Hessian2Input.readObject deserializationalldatacenter alldata4 HR AGO

CVE-2026-198256.9Medium–6.9MediumSourceCodester Simple Client Management System Master.php save_service sql injectionsourcecodester simple client management system4 HR AGO

CVE-2026-198248.7High–8.7HighTenda W20E addIpMacBind ipMacBindListStore stack-based overflowtenda w20e5 HR AGO

CVE-2026-73673

8.7

High

–

8.7High

Netis NC63 V3.0.0.3327 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication

netis systems co., ltd. netis nc63 wireless ac1200 router

5 HR AGO

CVE-2026-198238.7High–8.7HighTenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflowtenda w20e5 HR AGO

CVE-2026-198708.6High–8.6HighIDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creationroskus prospero flow crm5 HR AGO

CVE-2026-736306.9Medium–6.9MediumSiYuan before v3.7.4 Information Disclosure via authFilePublishAccesssiyuan-note siyuan5 HR AGO

CVE-2026-730516.3Medium–6.3Mediumactix-http before 3.12.1 HTTP Request Smuggling via CL.TEactix actix-web5 HR AGO

CVE-2026-730496.9Medium–6.9MediumSiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinkssiyuan-note siyuan5 HR AGO

CVE-2026-730486.9Medium–6.9MediumSiYuan before v3.7.4 Information Disclosure via getRefIDsByFileAnnotationIDsiyuan-note siyuan5 HR AGO

CVE-2026-728598.3High–8.3HighBudibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URLbudibase server5 HR AGO

CVE-2026-728387.1High–7.1HighFileBrowser before 2.63.19 Disk Exhaustion via TUS Uploadfilebrowser filebrowser5 HR AGO

CVE-2026-728378.7High–8.7HighFile Browser before 2.63.20 Privilege Escalation via Proxy Authenticationfilebrowser filebrowser5 HR AGO

CVE-2026-728369.2Critical–9.2CriticalFileBrowser before 2.63.19 Case Sensitivity Authentication Bypassfilebrowser filebrowser5 HR AGO

CVE-2026-728357.6High–7.6Highfilebrowser before v2.63.21 Access Rule Bypass via Path Canonicalizationfilebrowser filebrowser5 HR AGO

CVE-2026-728345.3Medium–5.3Mediumfilebrowser before 2.63.19 Permission Bypass via checksumfilebrowser filebrowser5 HR AGO

CVE-2026-728338.7High–8.7HighGrav 1.0.6 through 1.0.11 Privilege Escalation via Scoped API Keysgetgrav grav5 HR AGO

CVE-2026-728325.1Medium–5.1MediumGrav before 2.0.12 Stored XSS via quoted-attribute bypassgetgrav grav5 HR AGO

CVE-2026-728318.7High–8.7HighGrav through 2.0.11 Authentication Bypass via Flex Objectsgetgrav grav5 HR AGO

CVE-2026-728309.3Critical–9.3CriticalGrav API Plugin before 1.0.13 RCE via ConfigController scope bypassgetgrav grav5 HR AGO

CVE-2026-728299.3Critical–9.3CriticalGrav before 1.0.13 API Key Scope Bypass via UsersControllergetgrav grav5 HR AGO

CVE-2026-728288.6High–8.6HighGrav before 1.0.13 API Key Scope Bypass via InvitationsControllergetgrav grav5 HR AGO

CVE-2026-728278.7High–8.7HighGrav CMS before 2.0.13 Remote Code Execution via Twiggetgrav grav5 HR AGO

CVE-2026-728269.3Critical–9.3CriticalGrav before 1.0.13 Scope Bypass via createApiKeygetgrav grav5 HR AGO

CVE-2026-728257.2High–7.2HighGrav before 1.0.13 API-key scope cap bypass via ReportsControllergetgrav grav5 HR AGO

CVE-2026-728249.3Critical–9.3CriticalGrav before 1.0.13 API Key Scope Bypass via PagesControllergetgrav grav5 HR AGO

CVE-2026-728235.3Medium–5.3MediumGrav before 1.0.13 API-key scope cap bypass via DemoControllergetgrav grav5 HR AGO

CVE-2026-728229.3Critical–9.3CriticalGrav before 1.0.13 Authentication Bypass via disable2fagetgrav grav5 HR AGO

CVE-2026-728215.1Medium–5.1MediumGrav Form Plugin before 9.1.15 Stored XSS via Radio Togglegetgrav grav5 HR AGO

CVE-2026-728206.9Medium–6.9MediumGrav 2.0.11 Path Traversal via Backup Profile Configurationgetgrav grav5 HR AGO

CVE-2026-728198.7High–8.7HighGrav CMS before 2.0.13 Remote Code Execution via ZIP Uploadgetgrav grav5 HR AGO

CVE-2026-728176.9Medium–6.9Mediumgo-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-Forgo-chi chi5 HR AGO

CVE-2026-728166.9Medium–6.9Mediumgo-chi chi before 5.3.0 IP Spoofing via RealIP Middlewarego-chi chi5 HR AGO

CVE-2026-728156.9Medium–6.9Mediumgo-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Headergo-chi chi5 HR AGO

CVE-2026-728146.3Medium–6.3Mediumactix-web before 0.6.10 Information Disclosure via Filesactix actix-web5 HR AGO

CVE-2026-728136.9Medium–6.9Mediumactix-files before 0.6.10 Denial of Service via empty Range headeractix actix-web5 HR AGO

CVE-2026-728126.9Medium–6.9MediumSiYuan before v3.7.4 Missing Authorization via refreshBacklinksiyuan-note siyuan5 HR AGO

CVE-2026-728119.9Critical–9.9CriticalSiYuan before v3.7.4 SQL Injection via backlink searchsiyuan-note siyuan5 HR AGO

CVE-2026-728109.2Critical–9.2CriticalSiYuan before v3.7.4 Publish-Boundary Bypass via WebSocketsiyuan-note siyuan5 HR AGO

CVE-2025-714055.1Medium–5.1Mediumgo-chi chi before v5.2.2 Open Redirect via RedirectSlashesgo-chi chi5 HR AGO

CVE-2026-198228.7High–8.7HighTenda W20E QoS Edit editQos lstAdd stack-based overflowtenda w20e6 HR AGO

CVE-2026-198218.7High–8.7HighTenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflowtenda ac126 HR AGO

CVE-2026-198158.7High–8.7HighTOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflowtotolink a800r9 HR AGO

CVE-2026-198148.7High–8.7HighTOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflowtotolink a800r9 HR AGO

CVE-2026-198138.7High–8.7HighTOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflowtotolink a800r9 HR AGO

CVE-2026-197947.2High–7.2HighWP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scriptinggamerz wp-stats9 HR AGO

CVE-2026-198128.7High–8.7HighTOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflowtotolink a800r10 HR AGO

CVE-2026-198118.7High–8.7HighTOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflowtotolink a800r11 HR AGO

CVE-2026-18039—Unrated–—UnratedEssential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignmentunknown essential addons for elementor11 HR AGO

CVE-2026-16739—Unrated–—UnratedEpeken All Kurir <= 2.1.2 - Unauthenticated Order Payment Confirmation Forgeryunknown epeken all kurir for woocommerce11 HR AGO