Filter and search through 200,081 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-29124 | Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/... | 0.0 | 0 | Neutral | No |
| No |
| CVE-2026-29123 | A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially pref... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29122 | International Data Casting (IDC) SFX2100 satellite receiver comes with the `/bin/date` utility installed with the setuid bit set. This configuration g... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29121 | International Data Casting (IDC) SFX2100 satellite receiver comes with the `/sbin/ip` utility installed with the setuid bit set. This configuration gr... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29120 | The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX Series(SFX2100) SuperFlex Satellite Recei... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29119 | International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29073 | ### Summary /api/query/sql allows users to run SQL directly, but it only checks basic auth, not admin rights, any logged-in user, even readers, can ru... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29068 | PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability w... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29065 | ### Summary A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. ... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-29063 | ## Impact _What kind of vulnerability is it? Who is impacted?_ A Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), m... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-29062 | ### Summary The `UTF8DataInputJsonParser`, which is used when parsing from a `java.io.DataInput` source, bypasses the `maxNestingDepth` constraint (de... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-29059 | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticate... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29052 | The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled ... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29048 | HumHub is an Open Source Enterprise Social Network. In version 1.18.0, a cross-site scripting vulnerability was identified in the Button component of ... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29046 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.04, TinyWeb accepts request header values and later maps them in... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-29042 | ## Summary This vulnerability exists in Nuclio's Shell Runtime component, allowing attackers with function invocation permissions to inject malicious... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-29039 | ### Summary - The changedetection.io application allows users to specify XPath expressions as content filters via the include_filters field. These XPa... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-29023 | Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network atta... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-28804 | ### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the `/ASC... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-28802 | ### Summary After upgrading the library from 1.5.2 to 1.6.0 (and the latest 1.6.5) it was noticed that previous tests involving passing a malicious JW... | 0.0 | 0 | Neutral | No | Yes |