CVE Vulnerability Archive

# 376 Vulnerabilities

Severity:

Platform:

DATE	CVE Code	Vulnerability Description	CVSS / Severity	Platforms
2026-07-30	CVE-2026-16767	CVE-2026-16767 - Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal	3.1 (MEDIUM)	PHP
2026-07-30	CVE-2026-28698	CVE-2026-28698 - Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs	4.0 (CRITICAL)
2026-07-30	CVE-2026-40430	CVE-2026-40430 - Plaintext Storage of a Password in Panduit IntraVUE by Pronetiqs	4.0 (HIGH)
2026-07-30	CVE-2026-42933	CVE-2026-42933 - Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs	4.0 (CRITICAL)
2026-07-30	CVE-2026-44955	CVE-2026-44955 - Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs	4.0 (MEDIUM)
2026-07-30	CVE-2026-50044	CVE-2026-50044 - Inadequate Encryption Strength in Panduit IntraVUE by Pronetiqs	4.0 (HIGH)
2026-07-30	CVE-2026-63732	CVE-2026-63732 - 9router before 0.4.60 Remote Code Execution via default password	3.1 (CRITICAL)	Routers
2026-07-30	CVE-2026-65604	CVE-2026-65604 - Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass	4.0 (HIGH)
2026-07-30	CVE-2026-10697	CVE-2026-10697 - MFA Bypass in MOVEit Transfer	3.1 (HIGH)
2026-07-30	CVE-2026-15630	CVE-2026-15630 - CVE-2026-15630	3.1 (CRITICAL)
2026-07-30	CVE-2026-15966	CVE-2026-15966 - Improper CORS handling in MOVEit Transfer	3.1 (HIGH)
2026-07-30	CVE-2026-15967	CVE-2026-15967 - MOVEit Transfer refresh-token processing does not enforce updated account restrictions	3.1 (HIGH)
2026-07-30	CVE-2026-15968	CVE-2026-15968 - Stored XSS vulnerability in MOVEit Transfer	3.1 (HIGH)
2026-07-30	CVE-2026-15981	CVE-2026-15981 - SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter	3.1 (CRITICAL)
2026-07-30	CVE-2026-16002	CVE-2026-16002 - Out-of-bounds Read in MZ Automation lib60870	4.0 (HIGH)
2026-07-30	CVE-2026-16796	CVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()	4.0 (HIGH)	Python
2026-07-30	CVE-2026-21653	CVE-2026-21653 - CCure and Victor Application Server - Server Side Request Forgery	4.0 (HIGH)
2026-07-30	CVE-2026-21655	CVE-2026-21655 - C-CURE 9000 and Victor application server - Deserialization of Untrusted Data	4.0 (HIGH)
2026-07-30	CVE-2026-34496	CVE-2026-34496 - victor Web - Priviledge Escalation	4.0 (HIGH)
2026-07-30	CVE-2026-38764	CVE-2026-38764 - Protegent 360 Kernel Driver Privilege Escalation	3.1 (HIGH)
2026-07-30	CVE-2026-39155	CVE-2026-39155 - Knot DNS mod-onlinesign Authenticated Denial of Service Vulnerability	3.1 (MEDIUM)
2026-07-30	CVE-2026-47723	CVE-2026-47723 - nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)	4.0 (HIGH)
2026-07-30	CVE-2026-47724	CVE-2026-47724 - nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation	3.1 (CRITICAL)
2026-07-29	CVE-2026-49035	CVE-2026-49035 - Stack-based Buffer Overflow in MZ Automation libIEC61850	4.0 (CRITICAL)
2026-07-29	CVE-2026-50032	CVE-2026-50032 - NULL Pointer Dereference in MZ Automation libIEC61850	4.0 (HIGH)