Tagged “cve.org”
CVEs tagged cve.org, newest first.
47241 CVEsRSS
CVE-2026-106174Medium· 6.7A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HT…
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HT…
CVE-2026-82120Critical· 9.8Heap-based Buffer Overflow Vulnerability in HiRDB
Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00…
CVE-2026-82116Critical· 9.8Missing Authentication for Critical Function Vulnerability in HiRDB
Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Ver…
CVE-2026-86576Critical· 9.4Heap-based Buffer Overflow Vulnerability in JP1 Products
Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic J…
CVE-2026-82118Critical· 9.8Stack-based Buffer Overflow Vulnerability in HiRDB
Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-0…
CVE-2026-86575Critical· 9.4Stack-based Buffer Overflow Vulnerability in JP1 Products
Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic …
CVE-2026-82119Critical· 9.8OS Command Injection Vulnerability in HiRDB
OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 throu…
CVE-2026-86574Critical· 9.8Heap-based Buffer Overflow Vulnerability in JP1/Base
Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.
CVE-2026-76939Critical· 9.8Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00…
CVE-2026-76937Critical· 9.4Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
CVE-2026-76936Critical· 9.4Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
CVE-2026-76938Critical· 9.8Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
CVE-2026-76934Critical· 9.8Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-0…
CVE-2026-76935Critical· 9.4Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
CVE-2026-102789Critical· 9.3Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts() . Unlike other tasks in this controller,…
CVE-2026-76933Critical· 9.4Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00…
CVE-2026-76932Critical· 9.4Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-0…
CVE-2026-85299High· 8.3Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration
A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-pro…
CVE-2026-65211High· 7.2Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.
CVE-2026-65219High· 7.4Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands.
CVE-2026-65213Medium· 6.6Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC
CVE-2026-107147Medium· 6.3Authentication bypass by spoofing in twofactor_gauthenticator
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's pa…
CVE-2026-107146Medium· 6.3Insufficient session expiration in twofactor_gauthenticator
The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session destruction, an attacker can ignore the logout redirect and keep the session ali…
CVE-2026-65210Medium· 4.9Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role.
CVE-2026-107145Medium· 6.3Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator
The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who obtains user's password can submit arbitrary 6-digit codes, resulting in second…
CVE-2026-117493High· 8.3Multiple vulnerabilities in Sisense’s Cloud BI Platform
Stored Cross-Site Scripting (XSS) in Sisense BloX widgets, in all versions, both on Sisense Cloud and in self-hosted deployments, allows an authenticated user with the Designer or Administrator role to execute JavaScript code in the brow…
CVE-2026-102787Medium· 5.3Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
CVE-2026-18450Critical· 9.8Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.
CVE-2026-117494High· 8.3Multiple vulnerabilities in Sisense’s Cloud BI Platform
Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant wind…
CVE-2026-102788Critical· 9.3Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPo…