CVE.report search for "CVE-2026-105696"
Listed below are 50 relevant search results for "CVE-2026-105696" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-127236 | An argument injection vulnerability exists in the ad-hoc RRD graph feature of multiple versions of OpenNMS Meridian and Horiz... | ||
| CVE-2026-127235 | A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS Meridian and ... | ||
| CVE-2026-127207 | Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privile... | ||
| CVE-2026-126793 | An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 ... | ||
| CVE-2026-126644 | A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the fix for CVE-202... | ||
| CVE-2026-126625 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126624 | Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run... | ||
| CVE-2026-126623 | Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attack... | ||
| CVE-2026-126622 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126613 | Allocation of resources without limits in the JSON reader of Progressive Robot hMailServer 6.3.2 through 6.3.7 allows a remot... | ||
| CVE-2026-126612 | Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows a local authent... | ||
| CVE-2026-126610 | Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database and TlsMode=verify-full, does not hand th... | ||
| CVE-2026-126347 | Tornado is a Python web framework and asynchronous networking library. In versions through 6.6.0, applications using tornad... | ||
| CVE-2026-126332 | Improper access control in the autofill vault search in Devolutions Server 2026.3.13.0 and earlier allows an authenticated us... | ||
| CVE-2026-126331 | Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier all... | ||
| CVE-2026-126328 | Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows ... | ||
| CVE-2026-126327 | Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the ... | ||
| CVE-2026-126326 | Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows a... | ||
| CVE-2026-126123 | BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrativ... | ||
| CVE-2026-126069 | Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior... | ||
| CVE-2026-125757 | mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators ... | ||
| CVE-2026-125378 | PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for /admin/templa... | ||
| CVE-2026-125359 | Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, incl... | ||
| CVE-2026-125346 | Rejected reason: Duplicate CVE. Replaced by CVE-2026-125350 | ||
| CVE-2026-124704 | In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an... | ||
| CVE-2026-124703 | In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows... | ||
| CVE-2026-124702 | In Telerik UI for WPF, versions prior to 2026.4.1110, an untrusted URL redirection vulnerability exists that allows an attack... | ||
| CVE-2026-124701 | In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists that allo... | ||
| CVE-2026-124700 | In Telerik UI for WinForms, versions prior to 2026.4.1111, an untrusted URL redirection vulnerability exists that allows an a... | ||
| CVE-2026-124699 | In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists that a... | ||
| CVE-2026-124698 | In Progress Kendo UI for jQuery, the Chart default tooltip renders point values as raw HTML. An attacker who can influence a ... | ||
| CVE-2026-124697 | In Progress Kendo UI for jQuery, Chart shared-tooltip rendering treats bound category and series-name values as raw HTML. An ... | ||
| CVE-2026-124696 | In Progress Kendo UI for jQuery, Spreadsheet sheet names are inserted into the SheetsBar menu button's data-sheet-name attrib... | ||
| CVE-2026-124695 | In Progress Kendo UI for jQuery Form, the items[].hint option is documented as a string but is rendered as HTML. An attacker ... | ||
| CVE-2026-124694 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PropertyGrid does not encode boun... | ||
| CVE-2026-124693 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PivotGrid and PivotConfigurator a... | ||
| CVE-2026-124692 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reor... | ||
| CVE-2026-124691 | In Progress Kendo UI for jQuery Gantt, the task editor's Parent dropdown renders task titles as HTML. An attacker who can inf... | ||
| CVE-2026-124690 | In Progress Kendo UI for jQuery, sanitizeSvgContent() parses custom icon markup into a live DOM before filtering it. An attac... | ||
| CVE-2026-124689 | In Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, ActionSheet does not encode title... | ||
| CVE-2026-124688 | In Progress® Kendo® UI for jQuery prior to 2026.4.1111 the TabStrip, PanelBar, and Menu widgets support mapping a dataSour... | ||
| CVE-2026-124687 | In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow ... | ||
| CVE-2026-124686 | In Progress® Kendo® UI for jQuery versions prior to 2026.4.1111, kendo.init() compiles data-* attribute values with new Fun... | ||
| CVE-2026-124610 | Rejected reason: 依 VUL-2026-008441 判定為主 | ||
| CVE-2026-124037 | An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 ... | ||
| CVE-2026-124036 | Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-... | ||
| CVE-2026-124015 | XWEB EVO 5.6.2 through 5.8.8 contains an authentication bypass vulnerability that allows unauthenticated attackers to set the... | ||
| CVE-2026-124014 | XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote attackers to m... | ||
| CVE-2026-124013 | XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the api.lua import_preconfigurat... | ||
| CVE-2026-124012 | XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account is configured ... | ||