Tagged “nvd”

CVEs tagged nvd, newest first.

51020 CVEsRSS

CVE-2026-100503Low· 3.3

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 …

▾ Sunlitnsa · ghidraEPSS 0.12%via NVD

CVE-2026-96795High· 8.8PoC

1mo ago

Horilla is an HR and CRM software

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes field_tuple[1], interpolates it into dynamic_fn_str as Pyt…

▾ Midnighthorilla · horilla-hrEPSS 0.39%via NVD

CVE-2026-86066Medium· 5.9PoC

1mo ago

Horilla is an HR and CRM software

Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes attendance_validated, is_validate_request_approved, approved_by, and related pending-reque…

▾ Twilighthorilla · horilla-hrEPSS 0.25%via NVD

CVE-2026-57449High· 7.1PoC

1mo ago

Actual is a local-first personal finance tool

Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When `ACTUAL_GITHUB_TO…

▾ Midnightactualbudget · actualEPSS 0.26%via NVD

CVE-2026-9655None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-9652None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-88003High· 7.5PoC

1mo ago

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane fails to revoke administrative privileges after a role downgrade because Admin_Controller trusts the user_ty…

▾ MidnightInvoicePlane · InvoicePlaneEPSS 0.38%via NVD

CVE-2026-7800None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-7799None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-71483High· 8.5PoC

1mo ago

Horilla is an HR and CRM software

Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html() in employee/templates/employee_nav.html without HTML neutralization. An external attacker can craft …

▾ Midnighthorilla · horilla-hrEPSS 0.34%via NVD

CVE-2026-63432Medium· 6.5PoC

1mo ago

Horilla is an HR and CRM software

Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handlers in recruitment/views/actions.py and employee/not_in_out_dashboard.py render a user-controlled body at /recruitment/get-mail-preview/ and /…

▾ Twilighthorilla · horilla-hrEPSS 0.40%via NVD

CVE-2026-63431Medium· 6.5PoC

1mo ago

Horilla is an HR and CRM software

Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently authorize access in allowances_deductions_tab, view_single_allowance, and view_single_deduction before loading records sel…

▾ Twilighthorilla · horilla-hrEPSS 0.21%via NVD

CVE-2026-53973None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-53972None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-53971None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-49118None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-49117None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45241None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45240None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45239None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45238None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45237None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45236None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45235None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-45234None

1mo ago

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

▾ Sunlitvia NVD

CVE-2026-100502Medium· 5.0PoC

1mo ago

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. At…

▾ Twilightpawelmalak · flameEPSS 0.36%via NVD

CVE-2026-100501Medium· 6.5

1mo ago

Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that allows unauthenticated attackers to brute-force the admin password

Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that allows unauthenticated attackers to brute-force the admin password. Attackers can submit un…

▾ Sunlitpawelmalak · flameEPSS 0.29%via NVD

CVE-2026-100419High· 7.0PoC

1mo ago

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_exist…

▾ MidnightGitoxideLabs · gitoxideEPSS 0.22%via NVD

CVE-2026-100418Medium· 5.3PoC

1mo ago

Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that returns the entire configuration object without field redaction

Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that returns the entire configuration object without field redaction. Attackers can retrieve the stored weather API key an…

▾ Twilightpawelmalak · flameEPSS 0.43%via NVD

CVE-2026-100383Medium· 4.8

1mo ago

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - WikiLam…

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - WikiLam…

▾ SunlitWikimedia Foundation · Mediawiki - WikiLambda ExtensionEPSS 0.32%via NVD