by Kastro CVE-2026-23515 · SignalK signalk-server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,974 matching vulnerabilities · Page 226 of 780
SignalK
mitre
CVE-2025-67186 · mitre
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/…
CVE-2025-57529 · mitre
YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient inp…
CVE-2025-61506 · mitre
An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /…
CVE-2025-67188 · mitre
A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112.
CVE-2025-67187 · mitre
A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112.
CVE-2025-69971 · mitre
FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js.
CVE-2025-69981 · mitre
FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint.
CVE-2025-63624 · mitre
SQL Injection vulnerability in Shandong Kede Electronics Co., Ltd IoT smart water meter monitoring platform v.1.0 allows a remote attacke…
CVE-2025-65875 · mitre
An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to execute arbitrary code via…
CVE-2025-69983 · mitre
FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality.
CVE-2025-69970 · mitre
FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js.
CVE-2025-70841 · mitre
Dokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configur…
parisneo
CVE-2024-2356 · parisneo parisneo/lollms-webui
Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui
Insaat
lunary-ai
CVE-2024-5386 · lunary-ai lunary-ai/lunary
Account Hijacking via Password Reset Token Leak in lunary-ai/lunary
Unknown
CVE-2025-15030 · Unknown User Profile Builder
User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset
Ziroom
Davidvg
NixOS
NeoRazorX
nyariv
wildfirechat
ASUSTOR
ELECOM CO.,LTD.
CVE-2026-24465 · ELECOM CO.,LTD. WAB-S733IW2-PD
Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices.
HCL
Intermesh
eProsima
Innomic
CVE-2022-50981 · Innomic VibroLine VLX1 HD 5.0
Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements
Samsung Electronics
CVE-2026-25200 · Samsung Electronics MagicINFO 9 Server
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which ca…
CVE-2026-25202 · Samsung Electronics MagicINFO 9 Server
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This iss…
h2oai
Emit Informatics and Communication Technologies Industry and Trade Ltd. Co.
CVE-2025-5319 · Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System
SQLi in Emit Informatics' DIGITA Efficiency Management System
Lexmark
CVE-2025-65078 · Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ
Untrusted search path vulnerability in Embedded Solutions Framework
pear
CVE-2026-25237 · pear pearweb
PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails
CVE-2026-25241 · pear pearweb
PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint
CVE-2026-25234 · pear pearweb
PEAR is Vulnerable to SQL Injection in Category Deletion
CVE-2026-25236 · pear pearweb
PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
CVE-2026-25238 · pear pearweb
PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation
CVE-2026-25240 · pear pearweb
PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter
CVE-2026-25233 · pear pearweb
PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
Wikimedia Foundation
AKCE Software Technology R&D Industry and Trade Inc.
CVE-2025-8587 · AKCE Software Technology R&D Industry and Trade Inc. SKSPro
Time-Based Blind SQLi in AKCE Software's SKSPro
MediaTek, Inc.
CVE-2026-20418 · MediaTek, Inc. MediaTek chipset
In Thread, there is a possible out of bounds write due to a missing bounds check.
CVE-2026-20407 · MediaTek, Inc. MediaTek chipset
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check.
continuwuity
fedora
Rapid7
CVE-2026-1568 · Rapid7 Vulnerability Management