CVE.report search for "CVE-2025-40815"
Listed below are 50 relevant search results for "CVE-2025-40815" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-123335 | In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any... | ||
| CVE-2026-123325 | In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via ... | ||
| CVE-2026-123323 | In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allow... | ||
| CVE-2026-123302 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projec... |
| CVE-2026-122132 | go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows attacker... | ||
| CVE-2026-119654 | DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privil... | ||
| CVE-2026-119636 | Devolutions | Devolutions Server | Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 t... |
| CVE-2026-118696 | In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoL... | ||
| CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-... | ||
| CVE-2026-116257 | A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the fi... | ||
| CVE-2026-115908 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract... | ||
| CVE-2026-115341 | Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2... | ||
| CVE-2026-115340 | Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to... | ||
| CVE-2026-115339 | Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an unauthen... | ||
| CVE-2026-115338 | Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a network attacker... | ||
| CVE-2026-115337 | Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain f... | ||
| CVE-2026-115336 | Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an authentica... | ||
| CVE-2026-115243 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it ac... | ||
| CVE-2026-113466 | A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globa... | ||
| CVE-2026-111614 | DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that all... | ||
| CVE-2026-111252 | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS par... | ||
| CVE-2026-111235 | An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/... | ||
| CVE-2026-111096 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible |
| CVE-2026-111095 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible |
| CVE-2026-111094 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages... |
| CVE-2026-110447 | Collabora | Collabora Online - Built-in Code Server | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as ... |
| CVE-2026-109758 | Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to u... | ||
| CVE-2026-109603 | Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF ... | ||
| CVE-2026-109439 | Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability t... | ||
| CVE-2026-108109 | PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/control... | ||
| CVE-2026-108108 | PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::ch... | ||
| CVE-2026-108107 | PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoi... | ||
| CVE-2026-106218 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
| CVE-2026-105099 | A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionali... | ||
| CVE-2026-105098 | A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket... | ||
| CVE-2026-105097 | A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-c... | ||
| CVE-2026-105096 | A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ ... | ||
| CVE-2026-103937 | Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, clea... | ||
| CVE-2026-101878 | Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalI... | ||
| CVE-2026-101082 | A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.asp... | ||
| CVE-2026-101031 | The `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with Python's `... | ||
| CVE-2026-100255 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset |
| CVE-2026-100254 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via ... |
| CVE-2026-100253 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the vers... |
| CVE-2026-97952 | In the Linux kernel, the following vulnerability has been resolved: sunvdc: unmap LDC cookies when the descriptor send fails... | ||
| CVE-2026-96429 | SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allo... | ||
| CVE-2026-96428 | SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allow... | ||
| CVE-2026-94152 | A security vulnerability has been detected in Omega Solution FBP Fulfillment by People 2025. This impacts an unknown function... | ||
| CVE-2026-94091 | A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/... | ||
| CVE-2026-93649 | In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in c... | ||