Filter and search through 199,737 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-25097 | Rejected reason: Not used | 0.0 | 0 | Neutral | No |
| No |
| CVE-2026-25096 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25095 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25094 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25093 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25092 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25091 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25090 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25069 | SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthe... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25068 | alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control deco... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-25067 | SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day preview end... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-25063 | gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and incl... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-25061 | tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-25050 | ### Summary The `NativeAuthenticationStrategy.authenticate()` method is vulnerable to a timing attack that allows attackers to enumerate valid usernam... | 0.0 | 0 | Neutral | Yes | Yes |
| CVE-2026-25047 | ### Summary A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object beh... | 0.0 | 0 | Neutral | Yes | Yes |
| CVE-2026-25040 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. In versions up to and including 3.26.3, a Creator-level user... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-24984 | Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Configured Access Control Security... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-24936 | When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI progra... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-24935 | A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device s... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-24934 | The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN ... | 0.0 | 0 | Neutral | No | No |