Search vulnerabilities

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,645

CVE-2026-44706

Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values

Chatwoot is a customer engagement suite. From 2.2.0 to before 4.11.2, a SQL injection vulnerability exists in the conversation and contact filter APIs. When filtering by a custom attribute of type date or number using the is_greater_than or is_less_than operators, user-supplied values in the values field of the filter payload are interpolated directly into the SQL query without parameterization. Any authenticated user with access to an account can exploit this to execute arbitrary SQL via time-based blind injection. This affects /api/v1/accounts/{account_id}/conversations/filter, /api/v1/accounts/{account_id}/contacts/filter, and /api/v1/accounts/{account_id}/custom_attribute_definitions. This vulnerability is fixed in 4.11.2.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Chatwoot
Products
Chatwoot
CVE-2026-24201

Out‑of‑Bounds Access in NVIDIA Virtual GPU Manager Leading to Data Tampering or Denial of Service

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nvidia
Products
Virtual Gpu Manager
CVE-2018-25378

Notebook Pro 2.0 Denial of Service via Notebook Name Field

Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can create a malicious text file containing 500 or more characters, paste the content into the New Notebook Name field, and trigger an application crash when attempting to create and save the notebook.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Stokedonit
Products
Notebook Pro
CVE-2026-42000

Insufficient Validation of Names During AXFR

Insufficient Validation of Names During AXFR

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Powerdns
Products
Authoritative
CVE-2026-9543

Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection

A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 9.3 Critical EPSS 2.1% KEV · Not listed
Vendors
Totolink
Products
N300rh N300rh Firmware
CVE-2026-9564

SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/view_patient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Oretnom23 Sourcecodester
Products
Hospitals Patient Records Management System Hospitals Patient Records Management System
CVE-2026-42001

Insufficient Validation of Autoprimary SOA Queries

Insufficient Validation of Autoprimary SOA Queries

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Powerdns
Products
Authoritative
CVE-2026-42002

Concurrency and locking defects in GSS-TSIG

Concurrency and locking defects in GSS-TSIG

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Powerdns
Products
Authoritative
CVE-2026-2264

Server-Side Request Forgery and Credential Exfiltration in Google Cloud Apigee via SetIntegrationRequest Policy.

A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Google
Products
Cloud Apigee-x
CVE-2026-42396

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Powerdns
Products
Authoritative
CVE-2026-20921

Windows SMB Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 20 more
CVE-2026-20817

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS 5.4% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 21h2 Windows 10 21h2 Windows 10 22h2 and 11 more
CVE-2026-40597

MantisBT has a Content Security Policy bypass via attachments

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given any pre-existing XSS / HTML injection vulnerability, an attacker can bypass the Content Security Policy's script-src directive by uploading a crafted attachment to any issue that, when accessed via the file_download.php link, will be downloaded with a valid JavaScript MIME type resulting in script execution. The uploaded payload must be sniffed as a valid JavaScript MIME type by PHP finfo (see file_create_finfo() API function). Non-JavaScript MIME types will not get imported in a <script> tag by the browser, due to response header X-Content-Type-Options being set to nosniff, which requires all imported JavaScript files to be a valid JavaScript MIME type. This issue has been fixed in version 2.28.2.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Mantisbt
Products
Mantisbt
CVE-2026-39967

TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter

TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter results by typebotId, allowing an authenticated user to load result data (user answers, variable values) from a different typebot by supplying a foreign resultId to the startChat endpoint. Exploitation is constrained by CUID2's cryptographically random 24-character IDs (making brute-force infeasible), the requirement that rememberUser be enabled, and the need for matching variable names in the current typebot. If successfully exploited, an attacker can access the original user's previous answers, session variable values, and hasStarted flag, potentially exposing PII like names, emails, and phone numbers. This issue has been fixed in version 3.16.0.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Baptistearno
Products
Typebot.io
CVE-2026-7452

WRL File Parsing Memory Corruption in Autodesk 3ds Max

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Autodesk
Products
3ds Max
CVE-2026-7454

WRL File Parsing Memory Corruption in Autodesk 3ds Max

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Autodesk
Products
3ds Max
CVE-2026-7451

TIF File Parsing Out-of-Bounds Write in Autodesk 3ds Max

A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Autodesk
Products
3ds Max