Busca de CVEs

402.518 resultados
CVE-2026-100879MEDIUMzhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorizationEPSS 0.2%CVE-2026-100878MEDIUMzhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorizationEPSS 0.2%CVE-2026-96280HIGHFlatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systemsEPSS 0.6%CVE-2026-100877MEDIUMmathurvishal CloudClassroom-PHP-Project registrationform.php cross site scriptingEPSS 0.3%CVE-2026-96279MEDIUMFlatpak: flatpak: path traversal issue in oci archive extraction via hardlinksEPSS 0.6%CVE-2026-100876MEDIUMmathurvishal CloudClassroom-PHP-Project loginlinkstudent.php missing authenticationEPSS 0.3%CVE-2026-100875MEDIUMmathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php sql injectionEPSS 0.3%CVE-2026-100874MEDIUMmathurvishal CloudClassroom-PHP-Project addnewstudent.php sql injectionEPSS 0.3%CVE-2026-100873MEDIUMmathurvishal CloudClassroom-PHP-Project cross-site request forgeryEPSS 0.2%CVE-2026-101061LOWutcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypassEPSS 0.2%CVE-2026-101060HIGHpython-utcp before 1.1.4 SSRF via unvalidated HTTP redirectsEPSS 0.2%CVE-2026-101059HIGHutcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary BypassEPSS 0.2%CVE-2026-101058HIGHpython-utcp before 1.1.12 SSRF via Remote HTTP ManualEPSS 0.2%CVE-2026-101057LOWutcp-mcp before 1.1.3 SSRF via unvalidated MCP server URLEPSS 0.1%CVE-2026-101056MEDIUMCloudreve before 4.16.1 Authentication Bypass via Cached Context HintEPSS 0.2%CVE-2026-101051LOWCloudreve before 4.16.1 Path Traversal via Remote DownloadEPSS 0.2%CVE-2026-101048MEDIUMCloudreve before 4.17.0 SSRF via Admin.Read OAuth scopeEPSS 0.2%CVE-2026-101047MEDIUMFleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLsEPSS 0.2%CVE-2026-101046LOWFleet before 4.89.0 SQL Injection via ORDER BY Activity EndpointsEPSS 0.2%CVE-2026-101045HIGHFleet Homebrew Cask OS Command Injection via MetadataEPSS 0.8%