by Kastro CVE-2025-67038 · Lantronix EDS5000 series
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,960 matching vulnerabilities · Page 206 of 780
Lantronix
CVE-2025-70082 · Lantronix EDS3000PS series
Lantronix EDS3000PS Unverified Password Change
CVE-2025-67035 · Lantronix EDS5000 series
Lantronix EDS5000 OS Command Injection
CVE-2025-67039 · Lantronix EDS3000PS series
Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel
CVE-2025-67041 · Lantronix EDS3000PS series
Lantronix EDS3000PS OS Command Injection
sooperset
OneUptime
steveukx
WanderingAstronomer
CVE-2026-27897 · WanderingAstronomer Vociferous
Vociferous Unauthenticated Remote Path Traversal (RCE via CSRF)
argoproj
Unknown
CVE-2026-2631 · Unknown Datalogics Ecommerce Delivery
Datalogics Ecommerce Delivery < 2.6.60 - Unauthenticated Privilege Escalation
netbox-community
itsourcecode
CVE-2026-3944 · itsourcecode University Management System
itsourcecode University Management System att_add.php sql injection
parse-community
CVE-2026-30965 · parse-community parse-server
Parse Server session token exfiltration via `redirectClassNameForKey` query parameter
CVE-2026-30966 · parse-community parse-server
Parse Server role escalation and CLP bypass via direct `_Join` table write
CVE-2026-31840 · parse-community parse-server
Parse Server has a SQL injection via dot-notation field name in PostgreSQL
CVE-2026-31856 · parse-community parse-server
Parse Server has a SQL injection via `Increment` operation on nested object field in PostgreSQL
CVE-2026-31800 · parse-community parse-server
Parse Server: Classes `_GraphQLConfig` and `_Audience` master key bypass via generic class routes
Microsoft
CVE-2026-26105 · Microsoft Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server Spoofing Vulnerability
mitre
CVE-2026-30741 · mitre
A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request…
CVE-2025-66956 · mitre
Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and exec…
CVE-2025-70024 · mitre
An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata…
CVE-2025-70041 · mitre
An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master.
Hewlett Packard Enterprise (HPE)
CVE-2026-23813 · Hewlett Packard Enterprise (HPE) AOS-CX
Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset
Micro Research Ltd.
CVE-2026-27842 · Micro Research Ltd. MR-GM5L-S1
Authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication and change the devi…
CVE-2026-24448 · Micro Research Ltd. MR-GM5L-S1
Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administrative access.
jellyfin
Linux
@feathersjs
Coral-Protocol
CVE-2026-30968 · Coral-Protocol coral-server
Coral Server has insufficient validation of agent identity for SSE connections
CVE-2026-30969 · Coral-Protocol coral-server
Coral Server has insufficient agent authentication in session communication channels
CVE-2026-30970 · Coral-Protocol coral-server
Session authentication bypass in Coral Server session creation endpoint
nerves-hub
Zoom Communications
GetSimpleCMS-CE
CVE-2026-28495 · GetSimpleCMS-CE GetSimpleCMS-CE
GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php
CVE-2026-0110 · Google Android
In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption.
CVE-2026-0111 · Google Android
In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2026-0113 · Google Android
In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2026-0114 · Google Android
In Modem, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2026-0116 · Google Android
In __mfc_handle_released_buf of mfc_core_isr.c, there is a possible out of bounds write due to a missing bounds check.
CVE-2026-0120 · Google Android
In modem, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2025-48611 · Google Android
In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check.
CVE-2026-0124 · Google Android