CVE.report search for "CVE-2026-107703"
Listed below are 50 relevant search results for "CVE-2026-107703" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-109399 | SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c ... | ||
| CVE-2026-109392 | Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inje... | ||
| CVE-2026-109080 | SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read ... | ||
| CVE-2026-108976 | GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an i... | ||
| CVE-2026-108925 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administrat... | ||
| CVE-2026-108782 | A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServic... | ||
| CVE-2026-108781 | A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function... | ||
| CVE-2026-108779 | A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.lis... | ||
| CVE-2026-108778 | A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of... | ||
| CVE-2026-108777 | A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the fil... | ||
| CVE-2026-108775 | A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeContro... | ||
| CVE-2026-108774 | A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv ... | ||
| CVE-2026-108773 | A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main... | ||
| CVE-2026-108697 | CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list per... | ||
| CVE-2026-108264 | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.... | ||
| CVE-2026-108156 | LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handle... | ||
| CVE-2026-107914 | Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a c... | ||
| CVE-2026-107838 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. F... | ||
| CVE-2026-107837 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. I... | ||
| CVE-2026-107836 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. I... | ||
| CVE-2026-107813 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and na... | ||
| CVE-2026-107803 | ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint in P... | ||
| CVE-2026-107448 | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a serv... | ||
| CVE-2026-107394 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3... | ||
| CVE-2026-107352 | Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to r... | ||
| CVE-2026-107194 | Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login_type":"5" in a login request, po... | ||
| CVE-2026-106586 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding ... | ||
| CVE-2026-106505 | Linuxfoundation | Backstage Plugin-techdocs-node | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-nod... |
| CVE-2026-106446 | Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() ... | ||
| CVE-2026-106442 | Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate()... | ||
| CVE-2026-106219 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the serv... |
| CVE-2026-106218 | Jetbrains | Teamcity | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
| CVE-2026-106164 | In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnera... | ||
| CVE-2026-105820 | Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a ... | ||
| CVE-2026-105818 | Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issu... | ||
| CVE-2026-105816 | Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the confi... | ||
| CVE-2026-105747 | Docling | Docling | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem... |
| CVE-2026-105488 | Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only... | ||
| CVE-2026-105485 | Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker t... | ||
| CVE-2026-105274 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted reposito... | ||
| CVE-2026-105051 | Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on A... | ||
| CVE-2026-104977 | Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF ... | ||
| CVE-2026-104975 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v... | ||
| CVE-2026-104973 | Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP addresses on... | ||
| CVE-2026-104905 | FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData() that al... | ||
| CVE-2026-104887 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78409. Reason: This candidate is a dupli... | ||
| CVE-2026-104886 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78410. Reason: This candidate is a dupli... | ||
| CVE-2026-104851 | fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.im... | ||
| CVE-2026-104846 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 un... | ||
| CVE-2026-104758 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-73364. Reason: This candidate is a reser... | ||