CVE.report search for "CVE-2026-121417"
Listed below are 50 relevant search results for "CVE-2026-121417" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-121803 | Rejected reason: This CVE ID is a duplicate of CVE-2026-80335 (VULN-002 dl_download_midst) and has been rejected. | ||
| CVE-2026-121736 | NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler t... | ||
| CVE-2026-121580 | Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authe... | ||
| CVE-2026-120754 | Hdfgroup | Hdf5 | HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. ... |
| CVE-2026-120734 | Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlie... | ||
| CVE-2026-120733 | Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an a... | ||
| CVE-2026-120716 | Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.... | ||
| CVE-2026-120715 | Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allow... | ||
| CVE-2026-120497 | Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI in AWS AI-DLC Workflows before 2... | ||
| CVE-2026-120252 | imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define Huf... | ||
| CVE-2026-120251 | imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows attac... | ||
| CVE-2026-120195 | A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function s... | ||
| CVE-2026-119735 | Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users ... | ||
| CVE-2026-119734 | Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulnerability that allows authenticated ... | ||
| CVE-2026-119733 | Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion workflow at DE... | ||
| CVE-2026-119732 | Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authenticated ... | ||
| CVE-2026-119731 | Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /... | ||
| CVE-2026-119715 | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interface bec... | ||
| CVE-2026-119713 | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to se... | ||
| CVE-2026-119658 | PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts ... | ||
| CVE-2026-119636 | Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 t... | ||
| CVE-2026-119421 | Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allow... | ||
| CVE-2026-119417 | CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header in... | ||
| CVE-2026-119414 | Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows org... | ||
| CVE-2026-119335 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6... | ||
| CVE-2026-119299 | gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attack... | ||
| CVE-2026-119168 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that ma... | ||
| CVE-2026-118938 | In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example "Values.r... | ||
| CVE-2026-118763 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.t... | ||
| CVE-2026-118697 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider befor... | ||
| CVE-2026-118696 | In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoL... | ||
| CVE-2026-118654 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after route mat... | ||
| CVE-2026-118599 | A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension... | ||
| CVE-2026-118593 | A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 th... | ||
| CVE-2026-118258 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to... | ||
| CVE-2026-118040 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic si... | ||
| CVE-2026-118039 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerab... | ||
| CVE-2026-118038 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Con... | ||
| CVE-2026-118037 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, un... | ||
| CVE-2026-118036 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, in... | ||
| CVE-2026-118035 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algor... | ||
| CVE-2026-117174 | Rejected reason: VUL-2026-008368 為先回報之相同問題 | ||
| CVE-2026-116862 | Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. | ||
| CVE-2026-116769 | CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14... | ||
| CVE-2026-116768 | CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers... | ||
| CVE-2026-116767 | CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers ... | ||
| CVE-2026-116766 | CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14... | ||
| CVE-2026-116678 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader valida... | ||
| CVE-2026-116627 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devoluti... | ||
| CVE-2026-116584 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1... | ||