Export limit exceeded: 405275 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 405275 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 405275 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 405275 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (405275 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-108857 | 1 Huggingface | 1 Text-embeddings-inference | 2026-10-13 | 3.3 Low |
| Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured api_key because the router's Args struct lacks a redact attribute for it. Attackers with access to router logs, container output, or OTLP telemetry can recover the Bearer token and call the protected embedding and rerank endpoints. | ||||
| CVE-2026-108858 | 1 Predibase | 1 Lorax | 2026-10-13 | 5.5 Medium |
| Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded through the instrumented GenerateParameters span field. | ||||
| CVE-2026-108860 | 1 Scisharp | 1 Botsharp | 2026-10-13 | 9.1 Critical |
| BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret and fixed botsharp issuer and audience to impersonate any known user, including administrators, on Authorize-protected API routes. | ||||
| CVE-2026-108861 | 1 Erpipe-org | 1 Odoo Mcp | 2026-10-13 | 4.3 Medium |
| Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool. Attackers or prompt-injected agents can call read or search_read through execute_method naming denied fields to receive their values unredacted. | ||||
| CVE-2026-108862 | 1 Apiparklab | 1 Apipark | 2026-10-13 | 5.3 Medium |
| APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials by supplying a foreign authorization UUID. Attackers with authorization-view permission on one application can query /api/v1/app/authorization or its details route to retrieve plaintext API keys regardless of HideCredential. | ||||
| CVE-2026-108863 | 1 Katanemo | 1 Plano | 2026-10-13 | 7.5 High |
| Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config_dump endpoint to read configured LLM provider API keys in plaintext from the WASM filter configuration. | ||||
| CVE-2026-108865 | 1 Amoylab | 1 Unla | 2026-10-13 | 8.2 High |
| AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never authenticates a resource owner. Attackers can register a client, request a code from /authorize, and exchange it at /token to access OAuth2-protected MCP prefixes, proxied upstream APIs and injected credentials. | ||||
| CVE-2026-108913 | 1 Omarchy | 1 Omarchy | 2026-10-13 | 7.1 High |
| omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executable content from an untrusted Git repository. | ||||
| CVE-2026-59508 | 1 Interuse | 1 I-bos | 2026-10-13 | 5.9 Medium |
| Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0. | ||||
| CVE-2026-108925 | 1 Cohesity | 1 Netbackup Administration Console Web Interface | 2026-10-13 | 6.1 Medium |
| Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2. https://github.com/cohesity/SecAdvisory/blob/master/COH-2026-0002.md | ||||
| CVE-2026-87765 | 1 Unisoc | 1 Kernel | 2026-10-13 | 5.5 Medium |
| In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges. | ||||
| CVE-2026-66085 | 1 Unisoc | 1 Modem | 2026-10-13 | 5.5 Medium |
| In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed. | ||||
| CVE-2026-66086 | 1 Unisoc | 1 Modem | 2026-10-13 | 8.3 High |
| In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed. | ||||
| CVE-2026-108981 | 1 Denji | 1 Ngx Cache Purge | 2026-10-13 | 3.6 Low |
| ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker must be able to create a symlink inside the cache path. Version 3.0.4 fixes this for the case of a symlink created at an arbitrary earlier time, but does not resolve an applicable TOCTOU race condition. (The ngx_cache_purge module follows symlinks while walking the cache directory tree during purge operations. The module relies on nginx's ngx_walk_tree(), which relies on stat() and therefore follows symlinks.) | ||||
| CVE-2026-21127 | 1 Samsung Mobile | 1 Samsung Account | 2026-10-13 | N/A |
| Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data. | ||||
| CVE-2026-21128 | 1 Samsung Mobile | 1 Samsung Checkout | 2026-10-13 | N/A |
| Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges. | ||||
| CVE-2026-21129 | 1 Samsung Mobile | 1 Samsung Checkout | 2026-10-13 | N/A |
| Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges. | ||||
| CVE-2026-21130 | 1 Samsung Mobile | 1 Samsung Checkout | 2026-10-13 | N/A |
| Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges. | ||||
| CVE-2026-21131 | 1 Samsung Mobile | 1 Samsung Flow | 2026-10-13 | N/A |
| Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device. | ||||
| CVE-2026-21133 | 1 Samsung Mobile | 1 Samsung Flow | 2026-10-13 | N/A |
| Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data. | ||||