|
2026-07-28
|
CVE-2026-65919
|
CVE-2026-65919 - Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload
|
4.0 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-65920
|
CVE-2026-65920 - Diffusers Path Traversal via weight_map Arbitrary File Read
|
4.0 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-8287
|
CVE-2026-8287 - Unrestricted File Upload in BizimHesap Information Systems' Online Pre-Accounting Software
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-11804
|
CVE-2026-11804 - Program Module Vulnerability
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-43820
|
CVE-2026-43820 - SwiftNIO-SSL Out-of-Bounds Memory Access
|
3.1 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-43823
|
CVE-2026-43823 - Swift-Crypto RSA Double Free Vulnerability
|
3.1 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-48530
|
CVE-2026-48530 - GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48531
|
CVE-2026-48531 - GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48532
|
CVE-2026-48532 - GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48533
|
CVE-2026-48533
|
-
|
|
|
2026-07-28
|
CVE-2026-48534
|
CVE-2026-48534 - GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48535
|
CVE-2026-48535 - GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48536
|
CVE-2026-48536 - GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48537
|
CVE-2026-48537 - GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48538
|
CVE-2026-48538 - GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-48539
|
CVE-2026-48539 - GFI Archiver < 15.13 Stored XSS via MailInsights.aspx
|
3.1 (MEDIUM)
|
|
|
2026-07-28
|
CVE-2026-16584
|
CVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failure
|
4.0 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-65605
|
CVE-2026-65605 - SiYuan before v3.7.2 Stored XSS to RCE via Attribute View
|
3.1 (CRITICAL)
|
|
|
2026-07-28
|
CVE-2026-65606
|
CVE-2026-65606 - SiYuan before v3.7.2 Cross-Site Scripting to RCE
|
3.1 (CRITICAL)
|
|
|
2026-07-28
|
CVE-2026-65607
|
CVE-2026-65607 - SiYuan before v3.7.2 Path Traversal via /export/temp/
|
4.0 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-65608
|
CVE-2026-65608 - Grav before 2.0.9 Remote Code Execution via FlexDirectory
|
3.1 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-65895
|
CVE-2026-65895 - Grav API Plugin before 1.0.10 Broken Access Control
|
3.1 (CRITICAL)
|
|
|
2026-07-28
|
CVE-2026-65896
|
CVE-2026-65896 - Grav API Plugin before 1.0.10 Path Traversal via move
|
4.0 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-65897
|
CVE-2026-65897 - Grav API Plugin 1.0.9 Privilege Escalation via Invitations groups
|
3.1 (HIGH)
|
|
|
2026-07-28
|
CVE-2026-14257
|
CVE-2026-14257 - brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash
|
3.1 (HIGH)
|
|