CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- No product listedIncorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the getDeviceInfo function of TOTOLINK T6 4.1.5cu.748_B20211015...4.3 Medium
- No product listedIncorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...4.3 Medium
- No product listedAn issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an...6.5 Medium
- No product listedCross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before...6.1 Medium
- No product listedA command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1...8.1 High
- envoyproxy envoyEnvoy: ext_authz - RawHttpClientImpl onSuccess 0x0 segfault5.9 Medium
- envoyproxy envoyEnvoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null5.9 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreA host listed as a trusted proxy can send forwarding information containing a NUL byte, which...4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreThe comparison used for the doveadm password and API key is not fully timing safe and can reveal...3.1 Low
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes...4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn unauthenticated attacker can send an IMAP ID command with a very large number of parameters...7.5 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreForwarding information received from a host listed as a trusted proxy is not kept separate from...4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can use a Sieve script with the editheader extension to...9.1 Critical
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that holds an OAuth2 token granting only part of the required scopes can authenticate...5.9 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreNone None None No publicly available exploits are known.3.1 Low
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreWhen IMAP compression is enabled, the same compression state is reused across responses in a...3.7 Low
- open-xchange gmbh ox dovecot ceAn unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process...5.9 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreNone None None No publicly available exploits are known.7.4 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can send mail to a user can craft a message header whose values are chosen to...6.5 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can open many connections to the imap-hibernate service...4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can send mail to a user can craft a message header that makes the IMAP THREAD...6.5 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can submit a Sieve script containing an extreme numeric...4.3 Medium
- No product listedWordPress plugin (Spiffy Plugin) before 5.0.9 is affected by Stored Cross-Site Scripting in Event...5.4 Medium
- No product listedWordPress plugin (Bit Assist) before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To...4.8 Medium
- No product listedxipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject...5.4 Medium
- No product listedAn issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to...7.5 High
- No product listedAn issue in the seekdir() function (/dirent/mod.rs) of relibc commit 61f42d allows attackers to...7.5 High
- No product listedfile_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to...3.3 Low
- No product listedAn OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of...9.8 Critical
- No product listedAn issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows...7.5 High
- No product listedCross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute...6.1 Medium
- vllmvLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory...7.5 High
alloyopenSUSE,amazon-cloudwatch-agentopenSUSE,azl-otel-collectorAzure Linux +30 more +32 moregrpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X...9.8 Critical- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause...4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreMail content stored by a user can be crafted so that it is interpreted as dsync protocol commands...4.8 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn unauthenticated attacker can crash the ManageSieve login process by sending a small malformed...7.5 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can get Dovecot to relay a message, for example through Sieve redirect or...5.9 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreWhen mail_max_userip_connections is set (default 10) and reached, submission-login can crash with...4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can send mail to a user can craft a message whose headers contain a very large...7.5 High
- wazuhWazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config6.5 Medium
- Show moreLoading…