Export limit exceeded: 421985 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421985 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-118462 | 1 Compugroup Medical | 4 Infantia, Phronesis, Profim and 1 more | 2026-11-09 | N/A |
| Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution. | ||||
| CVE-2026-118464 | 1 Compugroup Medical | 4 Infantia, Phronesis, Profim and 1 more | 2026-11-09 | N/A |
| Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields. | ||||
| CVE-2026-118465 | 1 Compugroup Medical | 4 Infantia, Phronesis, Profim and 1 more | 2026-11-09 | N/A |
| Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations. | ||||
| CVE-2026-118467 | 1 Compugroup Medical | 4 Infantia, Phronesis, Profim and 1 more | 2026-11-09 | N/A |
| Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection. | ||||
| CVE-2026-118468 | 1 Compugroup Medical | 4 Infantia, Phronesis, Profim and 1 more | 2026-11-09 | N/A |
| XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity (XXE) attacks. | ||||
| CVE-2026-118790 | 1 Compugroup Medical | 1 Wingesfar | 2026-11-09 | N/A |
| Multiple hardcoded credentials are embedded within product components and administrative functionalities. These credentials may enable unauthorized access to privileged accounts, services, or application features across affected deployments. | ||||
| CVE-2026-118791 | 1 Compugroup Medical | 1 Wingesfar | 2026-11-09 | N/A |
| The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification. | ||||
| CVE-2026-118792 | 1 Compugroup Medical | 1 Wingesfar | 2026-11-09 | N/A |
| Default credentials permit access through AcuXDBC. | ||||
| CVE-2026-118795 | 1 Compugroup Medical | 3 Infantia, Profim, Venere | 2026-11-09 | N/A |
| Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access. | ||||
| CVE-2026-118798 | 1 Compugroup Medical | 1 Wingesfar | 2026-11-09 | N/A |
| Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise. | ||||
| CVE-2026-95648 | 1 C-prot | 1 Appdefense | 2026-11-09 | 8.1 High |
| Improperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc. C-Prot AppDefense allows Privilege Escalation. This issue affects C-Prot AppDefense: before 1.0.2729. | ||||
| CVE-2026-16283 | 1 Osbil Technology | 1 Opanel | 2026-11-09 | 8.8 High |
| Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Osbil Technology Ltd.Osbil Technology Ltd. OPanel allows OS Command Injection. This issue affects oPanel: before 1.20.66. | ||||
| CVE-2026-95779 | 1 Hpe | 1 Morpheus Software | 2026-11-09 | 8.8 High |
| An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager software. | ||||
| CVE-2025-10248 | 1 Opentext | 1 Filr | 2026-11-09 | N/A |
| XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack. | ||||
| CVE-2026-123088 | 2026-11-09 | 5.3 Medium | ||
| The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not perform any authorization check before returning an order's order-received URL for an attacker-supplied order id, exposing the order's secret key in the redirect and allowing unauthenticated attackers to enumerate orders and disclose customers' personal data (name, email address, phone number and address). | ||||
| CVE-2026-111421 | 1 Apache | 1 Airflow | 2026-11-09 | 8.8 High |
| Apache Airflow's Task Execution API stored XCom values written by a task without the reserved-key check applied elsewhere, so a Dag author's task could write an XCom that, when a user later viewed it through the API with deserialization enabled, made the API server instantiate classes from the `airflow.*` namespace with arguments the Dag author chose. This is an incomplete fix for CVE-2026-59242: users who applied that fix in apache-airflow 3.3.1 remain affected through this route and should upgrade to apache-airflow 3.4.0 or later. | ||||
| CVE-2026-120367 | 1 Apache | 1 Apache Axis2/java | 2026-11-09 | 7.5 High |
| Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The JSON message builders, including the Gson, Moshi and HTTP/2 variants, buffered the entire request body with no size limit, so an unauthenticated caller could exhaust server memory with a large JSON request. Version 2.0.2 bounds JSON request bodies with the configurable jsonMaxRequestSize parameter. This issue affects Apache Axis2/Java: through 2.0.1. Users are recommended to upgrade to version 2.0.2, which fixes the issue. | ||||
| CVE-2026-121842 | 1 Mozilla | 1 Firefox For Ios | 2026-11-09 | 8.8 High |
| Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0. | ||||
| CVE-2026-121843 | 1 Mozilla | 1 Firefox For Ios | 2026-11-09 | 8.8 High |
| Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0. | ||||
| CVE-2026-94249 | 1 Tubitak Bilgem Software Technologies Research Institute | 1 Liderahenk | 2026-11-09 | 8.1 High |
| Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Privilege Abuse. This issue affects Liderahenk: before 2.0.3. | ||||