CVEinfo

The Extended CVE DB collects official CVE entries and enriches them with additional datapoints and extended analysis. The associated VulDB entries contain additional technical details for in-depth analysis.

2026

CVEDescriptionSubmissionModerationEntry
CVE-2026-119744Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web clien ...11/05/202611/05/2026431483
CVE-2026-82894Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms a ...11/05/202611/05/2026431466
CVE-2026-81828Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.08 on all platfo ...11/05/202611/05/2026431472
CVE-2026-81816XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on al ...11/05/202611/05/2026431481
CVE-2026-81815SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24 ...11/05/202611/05/2026431463
CVE-2026-81808Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.08 on all platfo ...11/05/202611/05/2026431465
CVE-2026-81744Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on al ...11/05/202611/05/2026431464
CVE-2026-81734Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms al ...11/05/202611/05/2026431471
CVE-2026-76152Path traversal and missing authorization check in the imageCrop and imageRotate services in Apac ...11/05/202611/05/2026431473
CVE-2026-76150Path traversal and missing authorization check in the replaceImageToExistImage service in Apache ...11/05/202611/05/2026431469
CVE-2026-74841In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from ...11/05/202611/05/2026431477
CVE-2026-73580Missing authorization check in the getHRChild service in Apache OFBiz through 24.09.07 on all pl ...11/05/202611/05/2026431467
CVE-2026-73578Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 before 24.0 ...11/05/202611/05/2026431468
CVE-2026-73577Incorrect authorization in RequestHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms ...11/05/202611/05/2026431479
CVE-2026-71901Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz. A ...11/05/202611/05/2026431470
CVE-2026-68524An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, ...11/05/202611/05/2026431475
CVE-2026-66903Authenticated Path Traversal in Catalog Image Management allows writing image files outside the ...11/05/202611/05/2026431474
CVE-2026-123032A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee85 ...11/05/202611/05/2026431401
CVE-2026-106715NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView Java ...11/05/202611/05/2026431478
CVE-2026-106714Chewy for Android version 26.23.0 does not adequately validate the host of a product-details dee ...11/05/202611/05/2026431476
CVE-2026-106713An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive in ...11/05/202611/05/2026431482
CVE-2026-106716ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through i ...11/05/202611/05/2026431480
CVE-2026-84183Incorrect Authorization in the updateLayout simple-method in applications/content/minilang/layou ...11/05/202611/05/2026431462
CVE-2026-83542Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 ...11/05/202611/05/2026431456
CVE-2026-83538Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote una ...11/05/202611/05/2026431459
CVE-2026-82960Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz ...11/05/202611/05/2026431457
CVE-2026-82916Missing Authorization in XmlDsDump in Apache OFBiz 24.09 before 24.09.08 on all platforms allows ...11/05/202611/05/2026431458
CVE-2026-82912Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expressio ...11/05/202611/05/2026431455
CVE-2026-82910Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Inj ...11/05/202611/05/2026431453
CVE-2026-82907Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before ...11/05/202611/05/2026431460
CVE-2026-82904Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24.09 before 24.09 ...11/05/202611/05/2026431454
CVE-2026-82902Server-Side Request Forgery in ViewDataFile in Apache OFBiz 24.09 before 24.09.08 on all platfor ...11/05/202611/05/2026431461
CVE-2026-123028A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is ...11/05/202611/05/2026431400
CVE-2026-97356External Control of File Name or Path vulnerability in the ViewFile component of Label Manager i ...11/05/202611/05/2026431448
CVE-2026-97355Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 o ...11/05/202611/05/2026431449
CVE-2026-92887Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) ...11/05/202611/05/2026431444
CVE-2026-123024A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the functi ...11/05/202611/05/2026431397
CVE-2026-105325Missing check for  ACCOUNTING_UPDATE /  ACCOUNTING_CREATE in accounting in allows user with only ...11/05/202611/05/2026431451
CVE-2026-100228Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an a ...11/05/202611/05/2026431447
CVE-2026-100168Direct Request ('Forced Browsing') in the Content Manager component in Apache OFBiz 24.09.07 on ...11/05/202611/05/2026431445
CVE-2026-76563Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in F ...11/05/202611/05/2026431452
CVE-2026-85627Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Inj ...11/05/202611/05/2026431450
CVE-2026-84728Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms, when documented ...11/05/202611/05/2026431446
CVE-2026-123023A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_p ...11/05/202611/05/2026431396
CVE-2026-114277Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's op ...11/05/202611/05/2026431440
CVE-2026-114272Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBi ...11/05/202611/05/2026431434
CVE-2026-114271Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 2 ...11/05/202611/05/2026431432
CVE-2026-114235Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08  ...11/05/202611/05/2026431431
CVE-2026-114233Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all ...11/05/202611/05/2026431442
CVE-2026-114229Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Cata ...11/05/202611/05/2026431439
CVE-2026-109928Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validat ...11/05/202611/05/2026431436
CVE-2026-109856Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24 ...11/05/202611/05/2026431433
CVE-2026-109837Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 2 ...11/05/202611/05/2026431438
CVE-2026-109129Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz ...11/05/202611/05/2026431435
CVE-2026-105461Missing check for  ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to ...11/05/202611/05/2026431441
CVE-2026-105330Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24. ...11/05/202611/05/2026431437
CVE-2026-123059In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with th ...11/05/202611/05/2026431429
CVE-2026-123022A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is t ...11/05/202611/05/2026431395
CVE-2026-105321Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerabili ...11/05/202611/05/2026431427
CVE-2026-104720Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ...11/05/202611/05/2026431428
CVE-2026-117691A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs ...11/05/202611/05/2026431426
CVE-2026-107912A flaw was found in the management interface of the Quarkus framework, specifically within the q ...11/05/202611/05/2026431430
CVE-2026-123119The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address ...11/05/202611/05/2026431425
CVE-2026-123020A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1. The affected elem ...11/05/202611/05/2026431394
CVE-2026-103866Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability i ...11/05/202611/05/2026431422
CVE-2026-103864Improper output neutralization for logs in Apache Sling Engine. This issue affects Apache Sling ...11/05/202611/05/2026431424
CVE-2026-103863Improper neutralization of input during web page generation ('cross-site scripting') vulnerabili ...11/05/202611/05/2026431423
CVE-2026-95652Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Rese ...11/05/202611/05/2026431421
CVE-2026-123047In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments wit ...11/05/202611/05/2026431420
CVE-2026-96677Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/05/202611/05/2026431417
CVE-2026-73117Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerabil ...11/05/202611/05/2026431413
CVE-2026-73116Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau RestClien ...11/05/202611/05/2026431418
CVE-2026-73101Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The ...11/05/202611/05/2026431414
CVE-2026-73100Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default RES ...11/05/202611/05/2026431419
CVE-2026-73099Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts a "con ...11/05/202611/05/2026431416
CVE-2026-121489Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ...11/05/202611/05/2026431415
CVE-2026-123019A weakness has been identified in eosphoros-ai DB-GPT up to 0.8.2. Impacted is the function exec ...11/05/202611/05/2026431393
CVE-2026-73098Improper control of dynamically-loaded code vulnerability in Apache Juneau. When Apache Juneau p ...11/05/202611/05/2026431412
CVE-2026-73095Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The Message ...11/05/202611/05/2026431411
CVE-2026-123018A security flaw has been discovered in eosphoros-ai DB-GPT up to 0.8.2. This issue affects the f ...11/05/202611/05/2026431392
CVE-2026-123036A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is ce ...11/05/202611/05/2026431410
CVE-2026-118869An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated atta ...11/05/202611/05/2026431409
CVE-2026-117679A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attac ...11/05/202611/05/2026431408
CVE-2026-109408vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and host ...11/05/202611/05/2026431407
CVE-2026-107776The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor's rev ...11/05/202611/05/2026431404
CVE-2026-100109The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability ...11/05/202611/05/2026431405
CVE-2026-112072vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendo ...11/05/202611/05/2026431406
CVE-2026-76844zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz ...11/05/202611/05/2026394673
CVE-2026-123033Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25 ...11/05/202611/05/2026431403
CVE-2026-123029Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attack ...11/05/202611/05/2026431402
CVE-2026-123025An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module o ...11/05/202611/05/2026431399
CVE-2026-123017GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A ...11/05/202611/05/2026431398
CVE-2026-91049The EWWW Image Optimizer WordPress plugin before 8.9.1 does not properly sanitize and restrict a ...11/05/202611/05/2026431386
CVE-2026-90967The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice ...11/05/202611/05/2026431384
CVE-2026-90966The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX acti ...11/05/202611/05/2026431385
CVE-2026-90965The Essential Real Estate WordPress plugin before 5.3.5 does not perform a publication-status or ...11/05/202611/05/2026431382
CVE-2026-90964The Essential Real Estate WordPress plugin before 5.3.5 does not restrict the recipient of one o ...11/05/202611/05/2026431380
CVE-2026-90963The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or pu ...11/05/202611/05/2026431381
CVE-2026-88814The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically updat ...11/05/202611/05/2026431367
CVE-2026-87856The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership con ...11/05/202611/05/2026431372
CVE-2026-86795The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks i ...11/05/202611/05/2026431383
CVE-2026-86442The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post typ ...11/05/202611/05/2026431379
CVE-2026-85570The Tutor LMS WordPress plugin before 4.2.0 does not prevent the correct answers to quiz questio ...11/05/202611/05/2026431369
CVE-2026-85351The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not validate a user-supp ...11/05/202611/05/2026431391
CVE-2026-85347The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape ...11/05/202611/05/2026431376
CVE-2026-85346The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorizatio ...11/05/202611/05/2026431387
CVE-2026-19256The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of at ...11/05/202611/05/2026431371
CVE-2026-16304The WP Event Manager WordPress plugin before 3.4.2 does not properly validate ownership or the t ...11/05/202611/05/2026431370
CVE-2026-109150The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its sett ...11/05/202611/05/2026431390
CVE-2026-107787The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder main ...11/05/202611/05/2026431378
CVE-2026-107786The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-contro ...11/05/202611/05/2026431375
CVE-2026-107775The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 ...11/05/202611/05/2026431368
CVE-2026-107774The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 ...11/05/202611/05/2026431365
CVE-2026-107773The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 ...11/05/202611/05/2026431366
CVE-2026-105971The Car Dealer (Dealership) and Vehicle sales WordPress plugin through 4.73 does not restrict it ...11/05/202611/05/2026431373
CVE-2026-105259The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds t ...11/05/202611/05/2026431388
CVE-2026-100144The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment cal ...11/05/202611/05/2026431374
CVE-2026-123014iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, ...11/05/202611/05/2026431364
CVE-2026-93389The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitiv ...11/05/202611/05/2026431358
CVE-2026-120553The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scr ...11/05/202611/05/2026431362
CVE-2026-120533The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theme_ ...11/05/202611/05/2026431360
CVE-2026-118193The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Priv ...11/05/202611/05/2026431359
CVE-2026-116617The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to F ...11/05/202611/05/2026431357
CVE-2026-104812The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multi ...11/05/202611/05/2026431361
CVE-2026-123012In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a p ...11/05/202611/05/2026431363
CVE-2026-123011STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the a ...11/05/202611/05/2026431356
CVE-2026-123010@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an ...11/05/202611/05/2026431355
CVE-2026-122191A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an u ...11/05/202611/05/2026431165
CVE-2026-122236A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of th ...11/05/202611/05/2026431199
CVE-2026-122190A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted elemen ...11/05/202611/05/2026431164
CVE-2026-122189A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5. ...11/05/202611/05/2026431163
CVE-2026-48179In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service11/05/202611/05/2026431352
CVE-2026-48176A memory corruption vulnerability caused by improper validation of messages11/05/202611/05/2026431351
CVE-2026-35495In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability11/05/202611/05/2026431349
CVE-2026-33972In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.11/05/202611/05/2026431350
CVE-2026-33971In the LTE RRC component, improper handling of messages before authentication triggers a data ab ...11/05/202611/05/2026431354
CVE-2026-33969In the NAS Authentication Request message decoding procedure, a missing lower bound check causes ...11/05/202611/05/2026431348
CVE-2026-33958Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resul ...11/05/202611/05/2026431346
CVE-2026-122992In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cp ...11/05/202611/05/2026431345
CVE-2026-122160A security vulnerability has been detected in myshell-ai AIlice up to 0.4.0. This vulnerability ...11/05/202611/05/2026431160
CVE-2026-69068Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.11/05/202611/05/2026431323
CVE-2026-69066Memory corruption in GPU driver due to improper validation of VMID reservation.11/05/202611/05/2026431344
CVE-2026-69050Out-of-bounds memory access in a device driver due to improper resource state tracking.11/05/202611/05/2026431324
CVE-2026-69044In the Samsung GPU driver, improper reference count handling during command submission can lead ...11/05/202611/05/2026431347
CVE-2026-69043In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and clo ...11/05/202611/05/2026431342
CVE-2026-69025In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an ...11/05/202611/05/2026431339
CVE-2026-69006Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory ...11/05/202611/05/2026431322
CVE-2026-69005Integer overflow in NPU driver parameter processing due to insufficient bounds checking.11/05/202611/05/2026431340
CVE-2026-69002Incorrect authorization in Samsung framework services due to missing permission checks11/05/202611/05/2026431338
CVE-2026-68994A double free vulnerability in NPU driver due to improper pointer management (941)11/05/202611/05/2026431337
CVE-2026-68993A double free vulnerability in NPU driver due to improper pointer management (940)11/05/202611/05/2026431336
CVE-2026-68991In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processin ...11/05/202611/05/2026431341
CVE-2026-68990In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can c ...11/05/202611/05/2026431320
CVE-2026-68985In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lea ...11/05/202611/05/2026431335
CVE-2026-68984In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application ...11/05/202611/05/2026431321
CVE-2026-48186Improper handling of messages before AS security activation can cause unexpected behavior11/05/202611/05/2026431332
CVE-2026-48183Improper permission handling during buffer operations allows untrusted applications to create me ...11/05/202611/05/2026431325
CVE-2026-48178Out of bound access in PPC due to race condition in global variable access11/05/202611/05/2026431333
CVE-2026-48175Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-serv ...11/05/202611/05/2026431331
CVE-2026-48174In the NR RRC component, improper handling of messages before authentication triggers a data abo ...11/05/202611/05/2026431329
CVE-2026-48173In the NAS message handler, improper validation of the length field in NAS message causes memory ...11/05/202611/05/2026431330
CVE-2026-35494In the baseband, memory corruption during NAS packet processing can cause a denial of service.11/05/202611/05/2026431334
CVE-2026-33965An attacker may send a malicious IMS message to the target device, potentially leading to inform ...11/05/202611/05/2026431328
CVE-2026-122188A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67e ...11/05/202611/05/2026431162
CVE-2026-118027Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.11/05/202611/05/2026427394
CVE-2026-122159A weakness has been identified in Edge0-AI Audio8_TTS up to 1d64afcc2da56222b41ddcf53de7b8bc54be ...11/05/202611/05/2026431159
CVE-2026-122323Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSign ...11/05/202611/05/2026431316
CVE-2026-122322Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractSt ...11/05/202611/05/2026431318
CVE-2026-122321Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because ca ...11/05/202611/05/2026431312
CVE-2026-122320Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Poli ...11/05/202611/05/2026431303
CVE-2026-122319Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators t ...11/05/202611/05/2026431298
CVE-2026-122318Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verif ...11/05/202611/05/2026431301
CVE-2026-122316Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-e ...11/05/202611/05/2026431311
CVE-2026-122315Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unau ...11/05/202611/05/2026431317
CVE-2026-122314Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine t ...11/05/202611/05/2026431302
CVE-2026-122313Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows name ...11/05/202611/05/2026431300
CVE-2026-122312Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pk ...11/05/202611/05/2026431309
CVE-2026-122311Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of re ...11/05/202611/05/2026431308
CVE-2026-122310Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it ...11/05/202611/05/2026431307
CVE-2026-122309Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped po ...11/05/202611/05/2026431310
CVE-2026-122308Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler t ...11/05/202611/05/2026431315
CVE-2026-122307Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator con ...11/05/202611/05/2026431353
CVE-2026-122306Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy a ...11/05/202611/05/2026431299
CVE-2026-122305Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny tha ...11/05/202611/05/2026431306
CVE-2026-122304Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows nam ...11/05/202611/05/2026431313
CVE-2026-122303Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows nam ...11/05/202611/05/2026431304
CVE-2026-122302Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins ...11/05/202611/05/2026431305
CVE-2026-122301Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 returns field values in object creat ...11/05/202611/05/2026431314
CVE-2026-122157A vulnerability was identified in Purocean Yank Note 3.93.0. Affected by this vulnerability is t ...11/05/202611/05/2026431157
CVE-2026-122158A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this ...11/05/202611/05/2026431158
CVE-2026-122154A vulnerability was found in purocean Yank Note 3.93.0. This impacts the function config.getAll ...11/05/202611/05/2026431155
CVE-2026-122151A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the funct ...11/05/202611/05/2026431151
CVE-2026-122144A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542a ...11/05/202611/05/2026431149
CVE-2026-109849Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an a ...11/05/202611/05/2026431296
CVE-2026-122146A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function ...11/05/202611/05/2026431150
CVE-2026-122052A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown func ...11/05/202611/05/2026431136
CVE-2026-122051A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown fun ...11/05/202611/05/2026431135
CVE-2026-122050A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Managemen ...11/05/202611/05/2026431128
CVE-2026-122049A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_i ...11/05/202611/05/2026431126
CVE-2026-122299Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _par ...11/05/202611/05/2026431294
CVE-2026-102337Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untruste ...11/05/202611/05/2026431295
CVE-2026-122048A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix S ...11/05/202611/05/2026431121
CVE-2026-117666Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_ ...11/05/202611/05/2026429397
CVE-2026-62365Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoint ...11/05/202611/05/2026431292
CVE-2026-122047A security vulnerability has been detected in Campcodes Complete Advance Loan Management System ...11/05/202611/05/2026431115
CVE-2026-97702Open edX Platform enables the authoring and delivery of online learning at any scale. From the U ...11/05/202611/05/2026431293
CVE-2026-77372VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.30, th ...11/05/202611/05/2026431291
CVE-2026-62662Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. ...11/04/202611/04/2026431286
CVE-2026-53631GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 ...11/04/202611/04/2026431287
CVE-2026-47678GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an ...11/04/202611/04/2026431290
CVE-2026-108387radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, a ...11/04/202611/04/2026431289
CVE-2026-122038A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c ...11/04/202611/04/2026431103
CVE-2026-115770Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. ...11/04/202611/04/2026431288
CVE-2026-86041ezBookkeeping is an open source, self-hosted personal finance application. From 0.10.0 until 1.6 ...11/04/202611/04/2026431283
CVE-2026-76892tsParticles is a TypeScript library for creating highly customizable particle animations. Prior ...11/04/202611/04/2026431285
CVE-2026-76826tsParticles is a TypeScript library for creating highly customizable particle animations. From 4 ...11/04/202611/04/2026431280
CVE-2026-54381VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability ...11/04/202611/04/2026431279
CVE-2026-122028A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerabilit ...11/04/202611/04/2026431091
CVE-2026-57152GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from 11.0.0 ...11/04/202611/04/2026431284
CVE-2026-54384VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows ...11/04/202611/04/2026431277
CVE-2026-54383VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allo ...11/04/202611/04/2026431282
CVE-2026-54382VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Co ...11/04/202611/04/2026431278
CVE-2026-52848GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the lo ...11/04/202611/04/2026431281
CVE-2026-54374VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vul ...11/04/202611/04/2026431274
CVE-2026-54373VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnera ...11/04/202611/04/2026431275
CVE-2026-54372VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certifi ...11/04/202611/04/2026431270
CVE-2026-54375VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session managem ...11/04/202611/04/2026431268
CVE-2026-102280Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, ...11/04/202611/04/2026431266
CVE-2026-76893tsParticles is a TypeScript library for creating highly customizable particle animations. Prior ...11/04/202611/04/2026431276
CVE-2026-63655tsParticles is a TypeScript library for creating highly customizable particle animations. Prior ...11/04/202611/04/2026431267
CVE-2026-54380VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that a ...11/04/202611/04/2026431273
CVE-2026-54378VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows ...11/04/202611/04/2026431272
CVE-2026-54377VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability ...11/04/202611/04/2026431269
CVE-2026-54376VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI sche ...11/04/202611/04/2026431271
CVE-2026-122020A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected elemen ...11/04/202611/04/2026431086
CVE-2026-58128Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerabil ...11/04/202611/04/2026431264
CVE-2026-54379This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/04/202611/04/2026
 
CVE-2026-122016A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the fu ...11/04/202611/04/2026431084
CVE-2026-121749Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js ver ...11/04/202611/04/2026431257
CVE-2026-121747Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js ver ...11/04/202611/04/2026431260
CVE-2026-121746Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js ver ...11/04/202611/04/2026431254
CVE-2026-103002GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisionin ...11/04/202611/04/2026431253
CVE-2026-55368h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107f ...11/04/202611/04/2026431259
CVE-2026-55367h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506 ...11/04/202611/04/2026431258
CVE-2026-115473Mongoose is an embedded web server and network library. Prior to 7.22, mg_path_is_sane in src/ut ...11/04/202611/04/2026431255
CVE-2026-57567Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and a ...11/04/202611/04/2026431263
CVE-2026-57566Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and a ...11/04/202611/04/2026431262
CVE-2026-57565Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and a ...11/04/202611/04/2026431265
CVE-2026-57562Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and a ...11/04/202611/04/2026431261
CVE-2026-122266Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy ...11/04/202611/04/2026431256
CVE-2026-122019A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccount ...11/04/202611/04/2026431085
CVE-2026-102894GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisionin ...11/04/202611/04/2026431252
CVE-2026-121751Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js ver ...11/04/202611/04/2026431250
CVE-2026-121750Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js ver ...11/04/202611/04/2026431249
CVE-2026-121748Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js ver ...11/04/202611/04/2026431251
CVE-2026-121745Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js ver ...11/04/202611/04/2026431248
CVE-2026-97693Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development pla ...11/04/202611/04/2026431246
CVE-2026-122015A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the fu ...11/04/202611/04/2026431083
CVE-2026-102895GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisionin ...11/04/202611/04/2026431241
CVE-2026-82418IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execut ...11/04/202611/04/2026431243
CVE-2026-19319IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain ...11/04/202611/04/2026431242
CVE-2026-17493IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause ...11/04/202611/04/2026431240
CVE-2026-16725IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated atta ...11/04/202611/04/2026431245
CVE-2026-122235Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools g ...11/04/202611/04/2026431244
CVE-2026-122234jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers t ...11/04/202611/04/2026431247
CVE-2026-122233FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fa ...11/04/202611/04/2026431239
CVE-2026-122014A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function lo ...11/04/202611/04/2026431082
CVE-2026-116376IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to con ...11/04/202611/04/2026431235
CVE-2026-110283IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cau ...11/04/202611/04/2026431229
CVE-2026-110282IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to byp ...11/04/202611/04/2026431236
CVE-2026-110281IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, w ...11/04/202611/04/2026431231
CVE-2026-108910IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obt ...11/04/202611/04/2026431232
CVE-2026-108838IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of ...11/04/202611/04/2026431237
CVE-2026-108767IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to con ...11/04/202611/04/2026431233
CVE-2026-108588IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to byp ...11/04/202611/04/2026431228
CVE-2026-108536IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to byp ...11/04/202611/04/2026431230
CVE-2026-105991IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to byp ...11/04/202611/04/2026431238
CVE-2026-105702IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obt ...11/04/202611/04/2026431234
CVE-2026-122013A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an ...11/04/202611/04/2026431080
CVE-2026-115758SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet() in src/ ...11/04/202611/04/2026431226
CVE-2026-104203Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilt ...11/04/202611/04/2026431224
CVE-2026-97373draw.io is a configurable diagramming and whiteboarding application. Prior to 30.3.8, the option ...11/04/202611/04/2026431225
CVE-2026-115762draw.io is a configurable diagramming and whiteboarding application. Prior to 31.1.5, the GraphM ...11/04/202611/04/2026431227
CVE-2026-14252IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431207
CVE-2026-13292IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431198
CVE-2026-13289IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431202
CVE-2026-13284IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431203
CVE-2026-13271IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431196
CVE-2026-12550IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431197
CVE-2026-12538IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenti ...11/04/202611/04/2026431200
CVE-2026-12356IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431195
CVE-2026-11724IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431191
CVE-2026-11376IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431194
CVE-2026-10859IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431190
CVE-2026-122224WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows l ...11/04/202611/04/2026431209
CVE-2026-122140Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unaut ...11/04/202611/04/2026431220
CVE-2026-122139blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in Fo ...11/04/202611/04/2026431187
CVE-2026-122138BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a login rate limit bypass vulnerabil ...11/04/202611/04/2026431192
CVE-2026-122137Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundl ...11/04/202611/04/2026431221
CVE-2026-122136Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_pro ...11/04/202611/04/2026431223
CVE-2026-122135Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers t ...11/04/202611/04/2026431205
CVE-2026-122134Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers ...11/04/202611/04/2026431208
CVE-2026-122133Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allow ...11/04/202611/04/2026431211
CVE-2026-122132go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes mi ...11/04/202611/04/2026431218
CVE-2026-122131Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains a prototype pollution vulnerability ...11/04/202611/04/2026431215
CVE-2026-122130CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder ...11/04/202611/04/2026431219
CVE-2026-122129CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::re ...11/04/202611/04/2026431216
CVE-2026-122127CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that ...11/04/202611/04/2026431214
CVE-2026-122126reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handl ...11/04/202611/04/2026431217
CVE-2026-122009A flaw has been found in DataLinkDC Dinky up to 1.2.5. This vulnerability affects the function F ...11/04/202611/04/2026431072
CVE-2026-121969netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSM ...11/04/202611/04/2026431210
CVE-2026-121968Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSM ...11/04/202611/04/2026431206
CVE-2026-102339Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior t ...11/04/202611/04/2026431222
CVE-2026-102664ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and ...11/04/202611/04/2026431188
CVE-2026-102340Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior t ...11/04/202611/04/2026431212
CVE-2026-18142IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, ...11/04/202611/04/2026431186
CVE-2026-122220WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by ca ...11/04/202611/04/2026431185
CVE-2026-113374Sonatype Nexus Repository 3 does not require realm administration permission when a user creates ...11/04/202611/04/2026431178
CVE-2026-113373Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in thr ...11/04/202611/04/2026431182
CVE-2026-113372Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository t ...11/04/202611/04/2026431183
CVE-2026-113371Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through ...11/04/202611/04/2026431181
CVE-2026-113370Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Sear ...11/04/202611/04/2026431179
CVE-2026-113369Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI reposi ...11/04/202611/04/2026431180
CVE-2026-113368Sonatype Nexus Repository 3 does not check that a user account is authorized to access a reposit ...11/04/202611/04/2026431184
CVE-2026-97705Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Par ...11/04/202611/04/2026431176
CVE-2026-76806Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() ...11/04/202611/04/2026431175
CVE-2026-122192Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might a ...11/04/202611/04/2026431177
CVE-2026-97701Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, the auth ...11/04/202611/04/2026431168
CVE-2026-63183OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, OmniAuth ...11/04/202611/04/2026431171
CVE-2026-113783ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.3 until 5.3.7, ...11/04/202611/04/2026431174
CVE-2026-113780ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, ...11/04/202611/04/2026431172
CVE-2026-107846bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3.0 until 5.2.1, ...11/04/202611/04/2026431169
CVE-2026-121933A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of th ...11/04/202611/04/2026431045
CVE-2026-115574Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-pu ...11/04/202611/04/2026431173
CVE-2026-115474Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the ...11/04/202611/04/2026431170
CVE-2026-121932A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of th ...11/04/202611/04/2026431044
CVE-2026-113782ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.0 until 5.2.8, ...11/04/202611/04/2026431166
CVE-2026-102345Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the new Vue- ...11/04/202611/04/2026431167
CVE-2026-82033DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing aut ...11/04/202611/04/2026431161
CVE-2026-121931A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is t ...11/04/202611/04/2026431043
CVE-2026-122124On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can ...11/04/202611/04/2026431154
CVE-2026-122120In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerabilit ...11/04/202611/04/2026431152
CVE-2026-121929A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted is an unknown fu ...11/04/202611/04/2026431041
CVE-2026-121928A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unkno ...11/04/202611/04/2026431040
CVE-2026-82029Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenti ...11/04/202611/04/2026431156
CVE-2026-122148In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end valid ...11/04/202611/04/2026431153
CVE-2026-121930A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function ...11/04/202611/04/2026431042
CVE-2026-57853DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authe ...11/04/202611/04/2026431148
CVE-2026-122118In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default ...11/04/202611/04/2026431147
CVE-2026-122116Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerabil ...11/04/202611/04/2026431146
CVE-2026-121971The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (s ...11/04/202611/04/2026431145
CVE-2026-121927A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the ...11/04/202611/04/2026431037
CVE-2026-119977WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due ...11/04/202611/04/2026429484
CVE-2026-122054Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example ...11/04/202611/04/2026431144
CVE-2026-121926A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abd ...11/04/202611/04/2026431035
CVE-2026-119747The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability ...11/04/202611/04/2026431141
CVE-2026-119749The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerabili ...11/04/202611/04/2026431142
CVE-2026-119748The GetPaid plugin for WordPress before 2.8.63 contains an authorization bypass vulnerability th ...11/04/202611/04/2026431143
CVE-2026-76506A vulnerability in the web-based management interface of Cisco UCS Central Software could allow ...11/04/202611/04/2026431138
CVE-2026-76419A vulnerability in the web-based management interface of Cisco Unified Communications Manager (U ...11/04/202611/04/2026431139
CVE-2026-20241A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ...11/04/202611/04/2026431140
CVE-2026-106554One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tag ...11/04/202611/04/2026431137
CVE-2026-121967Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, ...11/04/202611/04/2026431120
CVE-2026-121966Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ing ...11/04/202611/04/2026431133
CVE-2026-121965Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a prototype pollution vulne ...11/04/202611/04/2026431134
CVE-2026-121964FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where ...11/04/202611/04/2026431124
CVE-2026-121963FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd ...11/04/202611/04/2026431131
CVE-2026-121962FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handlin ...11/04/202611/04/2026431130
CVE-2026-121961FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC track ...11/04/202611/04/2026431118
CVE-2026-121960FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow serve ...11/04/202611/04/2026431114
CVE-2026-121959FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fai ...11/04/202611/04/2026431129
CVE-2026-121958FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the delete_su ...11/04/202611/04/2026431132
CVE-2026-121957FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers ...11/04/202611/04/2026431127
CVE-2026-121956FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function ...11/04/202611/04/2026431116
CVE-2026-121955FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext tha ...11/04/202611/04/2026431123
CVE-2026-121954FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because freerdp_bitmap_ ...11/04/202611/04/2026431113
CVE-2026-121953FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a dup ...11/04/202611/04/2026431125
CVE-2026-121952FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_bitmap_cache_v2_c ...11/04/202611/04/2026431122
CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips the six-byte body of a slow ...11/04/202611/04/2026431112
CVE-2026-121950FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi_CreateSurface when ...11/04/202611/04/2026431119
CVE-2026-119746ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login lockout bypass in t ...11/04/202611/04/2026431117
CVE-2026-109518On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate th ...11/04/202611/04/2026431111
CVE-2026-92704SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-relea ...11/04/202611/04/2026431109
CVE-2026-91168Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29. ...11/04/202611/04/2026431110
CVE-2026-91163Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Ku ...11/04/202611/04/2026431107
CVE-2026-122032SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers wi ...11/04/202611/04/2026431105
CVE-2026-66736Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/04/202611/04/2026
 
CVE-2026-120421In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0 ...11/04/202611/04/2026431108
CVE-2026-100408Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a ...11/04/202611/04/2026431106
CVE-2026-100407Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the gi ...11/04/202611/04/2026431104
CVE-2026-122007Oqtane Framework before 10.3.0 contains a broken access control vulnerability in SettingControll ...11/04/202611/04/2026431093
CVE-2026-121640An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows ...11/04/202611/04/2026431092
CVE-2026-121639A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway all ...11/04/202611/04/2026431096
CVE-2026-121638An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attac ...11/04/202611/04/2026431094
CVE-2026-121637An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentica ...11/04/202611/04/2026431095
CVE-2026-122008Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the Uploa ...11/04/202611/04/2026431097
CVE-2026-121009SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check f ...11/04/202611/04/2026431090
CVE-2026-121008SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescape ...11/04/202611/04/2026431088
CVE-2026-121007SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the wher ...11/04/202611/04/2026431089
CVE-2026-114627Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted ...11/04/202611/04/2026431087
CVE-2026-39431On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a manag ...11/04/202611/04/2026431081
CVE-2026-121632Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML ...11/04/202611/04/2026431079
CVE-2026-39430On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is brok ...11/04/202611/04/2026431078
CVE-2026-122006The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing o ...11/04/202611/04/2026431076
CVE-2026-119776In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not check ...11/04/202611/04/2026431077
CVE-2026-119745MultiVendorX plugin for WordPress before 5.0.21 contains a missing authorization vulnerability t ...11/04/202611/04/2026431074
CVE-2026-118391Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an ...11/04/202611/04/2026431075
CVE-2026-121993wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing authorization vulnerabilit ...11/04/202611/04/2026431071
CVE-2026-121970Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 contains an improper crypt ...11/04/202611/04/2026431070
CVE-2026-121373The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48 ...11/04/202611/04/2026431069
CVE-2026-121620CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vulnerability that ...11/04/202611/04/2026431065
CVE-2026-121145This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to insufficient vali ...11/04/202611/04/2026431068
CVE-2026-118516The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path inf ...11/04/202611/04/2026431066
CVE-2026-121147This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to improper implemen ...11/04/202611/04/2026431064
CVE-2026-121146This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of ...11/04/202611/04/2026431067
CVE-2026-119429phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenti ...11/04/202611/04/2026428988
CVE-2026-119428phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauth ...11/04/202611/04/2026428992
CVE-2026-119427phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that ...11/04/202611/04/2026428986
CVE-2026-119426phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote ...11/04/202611/04/2026428991
CVE-2026-65555Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncann ...11/04/202611/04/2026431057
CVE-2026-119481Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows ...11/04/202611/04/2026431063
CVE-2026-119468Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431061
CVE-2026-118513Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of Symfony ...11/04/202611/04/2026431050
CVE-2026-107479An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Comp ...11/04/202611/04/2026431058
CVE-2026-121946zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vul ...11/04/202611/04/2026431060
CVE-2026-121945CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that allows ...11/04/202611/04/2026431052
CVE-2026-121944sngrep through 1.9.0 contains an infinite loop vulnerability in capture_packet_reasm_ip() in src ...11/04/202611/04/2026431056
CVE-2026-121943Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_pac ...11/04/202611/04/2026431049
CVE-2026-121942ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _zbar_sq_decode() in zbar/s ...11/04/202611/04/2026431054
CVE-2026-121941libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::p ...11/04/202611/04/2026431047
CVE-2026-121940Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object reference vulnerability ...11/04/202611/04/2026431055
CVE-2026-121939Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::find ...11/04/202611/04/2026431062
CVE-2026-121938langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability th ...11/04/202611/04/2026431053
CVE-2026-121937loonflow before r3.2.3 contains a missing authorization vulnerability in TicketFlowHistoryView t ...11/04/202611/04/2026431051
CVE-2026-121936easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthe ...11/04/202611/04/2026431059
CVE-2026-121144This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to presence of hardc ...11/04/202611/04/2026431048
CVE-2026-121925A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, unde ...11/04/202611/04/2026431046
CVE-2026-97397The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance plugin ...11/04/202611/04/2026431038
CVE-2026-59267A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and ear ...11/04/202611/04/2026430939
CVE-2026-114456Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single sign-o ...11/04/202611/04/2026431039
CVE-2026-104799The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up ...11/04/202611/04/2026431036
CVE-2026-90634An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.1 ...11/04/202611/04/2026430941
CVE-2026-90632Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted docume ...11/04/202611/04/2026430940
CVE-2026-90631Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache O ...11/04/202611/04/2026430932
CVE-2026-90629An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.1 ...11/04/202611/04/2026430937
CVE-2026-90628An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.1 ...11/04/202611/04/2026430936
CVE-2026-90627The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted docu ...11/04/202611/04/2026430938
CVE-2026-90626An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.1 ...11/04/202611/04/2026430934
CVE-2026-90624An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 o ...11/04/202611/04/2026430930
CVE-2026-59268An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an ...11/04/202611/04/2026430935
CVE-2026-59264The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated syst ...11/04/202611/04/2026430933
CVE-2026-59263A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted conte ...11/04/202611/04/2026430931
CVE-2026-115448Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snapshot by ...11/04/202611/04/2026430507
CVE-2026-108500Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlug ...11/04/202611/04/2026430496
CVE-2026-100300Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an ...11/04/202611/04/2026430508
CVE-2026-100252Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on ...11/04/202611/04/2026430509
CVE-2026-100235Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the set ...11/04/202611/04/2026430506
CVE-2026-100302Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ...11/04/202611/04/2026430513
CVE-2026-102704[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ...11/04/202611/04/2026431034
CVE-2026-102703[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ...11/04/202611/04/2026431033
CVE-2026-120422Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism ...11/04/202611/04/2026431031
CVE-2026-111822Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ ...11/04/202611/04/2026430368
CVE-2026-111821Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can c ...11/04/202611/04/2026430367
CVE-2026-111040The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authen ...11/04/202611/04/2026431032
CVE-2026-108949Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker. An authenticated Op ...11/04/202611/04/2026430378
CVE-2026-108946Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. The ActiveMQ ...11/04/202611/04/2026430380
CVE-2026-103582Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET O ...11/04/202611/04/2026430379
CVE-2026-111038CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal Saa ...11/04/202611/04/2026431030
CVE-2026-111037A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier ...11/04/202611/04/2026431029
CVE-2026-111036Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, spe ...11/04/202611/04/2026431028
CVE-2026-95649IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with a ...11/04/202611/04/2026431021
CVE-2026-94460IRISPowerscan contain an insecure default configuration where the built-in installation account ...11/04/202611/04/2026431024
CVE-2026-94459IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated att ...11/04/202611/04/2026431022
CVE-2026-110935The PFI plugin framework deployment routine does not validate path components when extracting ar ...11/04/202611/04/2026431027
CVE-2026-110022The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into ...11/04/202611/04/2026431025
CVE-2026-110021PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify th ...11/04/202611/04/2026431023
CVE-2026-93900The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross- ...11/04/202611/04/2026431026
CVE-2026-120554The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escala ...11/04/202611/04/2026431019
CVE-2026-115498The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-we ...11/04/202611/04/2026431020
CVE-2026-114421SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregist ...11/04/202611/04/2026431017
CVE-2026-114420SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauth ...11/04/202611/04/2026431018
CVE-2026-114425SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided L ...11/04/202611/04/2026431016
CVE-2026-114424SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as ...11/04/202611/04/2026431014
CVE-2026-114426SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data b ...11/04/202611/04/2026431015
CVE-2026-19731Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ...11/04/202611/04/2026431012
CVE-2026-19721Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software T ...11/04/202611/04/2026431013
CVE-2026-62126Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single ...11/04/202611/04/2026431003
CVE-2026-62007Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431006
CVE-2026-57775Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudfla ...11/04/202611/04/2026431005
CVE-2026-57666Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431011
CVE-2026-57639Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431010
CVE-2026-56065Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in ...11/04/202611/04/2026431008
CVE-2026-54861Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431007
CVE-2026-119477Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431009
CVE-2026-119366Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431004
CVE-2026-110944Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Q ...11/04/202611/04/2026431002
CVE-2026-62000Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace all ...11/04/202611/04/2026431000
CVE-2026-54851Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...11/04/202611/04/2026431001
CVE-2026-121818Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenti ...11/04/202611/04/2026430999
CVE-2026-121817Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference ...11/04/202611/04/2026430998
CVE-2026-121816Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. ...11/04/202611/04/2026430997
CVE-2026-87044The Mbed TLS crypto shim driver in drivers/crypto/crypto_mbedtls_shim.c drives PSA multipart cip ...11/04/202611/04/2026430976
CVE-2026-87043The entropy-device random number generator in subsys/random/random_entropy_device.c returned ear ...11/04/202611/04/2026430971
CVE-2026-87041The RTIO submission-queue verifier rtio_vrfy_sqe() in subsys/rtio/rtio_syscalls.c (subsys/rtio/r ...11/04/202611/04/2026430967
CVE-2026-87040The nRF link-layer receive paths of the open-source Bluetooth LE Controller did not validate the ...11/04/202611/04/2026430968
CVE-2026-87039The user-mode syscall verifier z_vrfy_i2s_configure() in drivers/i2s/i2s_handlers.c copies the c ...11/04/202611/04/2026430988
CVE-2026-87038The user-mode verification handler for the i3c_transfer() system call, z_vrfy_i3c_transfer() in ...11/04/202611/04/2026430995
CVE-2026-85036The Bluetooth Classic AVDTP layer defers releasing a session's stream endpoints: bt_avdtp_l2cap_ ...11/04/202611/04/2026430974
CVE-2026-16511Two RTIO syscall verifiers, in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v ...11/04/202611/04/2026430990
CVE-2026-118983The VikWidgetsLoader WordPress plugin before 1.12.3 does not sanitise or escape several block at ...11/04/202611/04/2026430986
CVE-2026-118783The All-in-One Video Gallery WordPress plugin before 5.0.0 does not validate and escape some of ...11/04/202611/04/2026430996
CVE-2026-118637The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility ...11/04/202611/04/2026430973
CVE-2026-118523The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post st ...11/04/202611/04/2026430984
CVE-2026-118422The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appe ...11/04/202611/04/2026430994
CVE-2026-118407The Premium Packages WordPress plugin before 7.3.1 does not verify that a user claiming a guest ...11/04/202611/04/2026430985
CVE-2026-118404The Premium Packages WordPress plugin before 7.3.1 does not verify ownership or session binding ...11/04/202611/04/2026430989
CVE-2026-118403The Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a gue ...11/04/202611/04/2026430983
CVE-2026-115426The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.138 does not properly vali ...11/04/202611/04/2026430982
CVE-2026-115262The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does ...11/04/202611/04/2026430975
CVE-2026-115257The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks befor ...11/04/202611/04/2026430981
CVE-2026-115250The Text Typing WordPress plugin before 2.2.2 does not properly sanitize and escape a block attr ...11/04/202611/04/2026430993
CVE-2026-115243The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the ...11/04/202611/04/2026430965
CVE-2026-115242The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not sanitize the ...11/04/202611/04/2026430979
CVE-2026-115241The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not verify that a ...11/04/202611/04/2026430972
CVE-2026-114431The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file throu ...11/04/202611/04/2026430978
CVE-2026-112244The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does ...11/04/202611/04/2026430964
CVE-2026-112243The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does ...11/04/202611/04/2026430992
CVE-2026-111962The WP Remote Users Sync WordPress plugin before 2.2.0 does not adequately restrict access to th ...11/04/202611/04/2026430966
CVE-2026-111740The Post Duplicator WordPress plugin before 3.0.17 does not check whether the requesting user ma ...11/04/202611/04/2026430980
CVE-2026-110964The Essential Real Estate WordPress plugin before 5.3.5 does not verify that a media attachment ...11/04/202611/04/2026430977
CVE-2026-110692The PowerPack Addons for Elementor: Widgets, Form Styler and Templates WordPress plugin before 3 ...11/04/202611/04/2026430987
CVE-2026-108068The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper autho ...11/04/202611/04/2026430970
CVE-2026-108067The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not properly verify reco ...11/04/202611/04/2026430969
CVE-2026-108041The SEOPress WordPress plugin before 10.4 does not sanitise and escape some of its analytics tra ...11/04/202611/04/2026430991
CVE-2026-106649The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not pr ...11/04/202611/04/2026430963
CVE-2026-106000The Booking Package WordPress plugin before 1.7.34 does not require payment to be completed befo ...11/04/202611/04/2026430961
CVE-2026-105413The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submit ...11/04/202611/04/2026430958
CVE-2026-105191The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17. ...11/04/202611/04/2026430959
CVE-2026-104719The CookieYes WordPress plugin before 3.5.8 does not correctly restrict who can write its cookie ...11/04/202611/04/2026430960
CVE-2026-101166The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's pu ...11/04/202611/04/2026430962
CVE-2026-101165The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify an order's pay ...11/04/202611/04/2026430957
CVE-2026-77690ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injecti ...11/04/202611/04/2026430956
CVE-2026-77779ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control ...11/04/202611/04/2026430955
CVE-2026-11753A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-con ...11/04/202611/04/2026430953
CVE-2026-11749A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are ...11/04/202611/04/2026430952
CVE-2026-105296Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a maliciou ...11/04/202611/04/2026430951
CVE-2026-80335In the bootloader download module, there is a possible out-of-bounds write due to a failure to r ...11/04/202611/04/2026430950
CVE-2026-79405In Modem Firmware, there is a possible system crash due to improper input validation of dedicate ...11/04/202611/04/2026430948
CVE-2026-121803In UFS Field Firmware Update (FFU) functionality, there is a possible out-of-bounds write due to ...11/04/202611/04/2026430949
CVE-2026-121618A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the fi ...11/04/202611/04/2026430466
CVE-2026-121802@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated ...11/04/202611/04/2026430947
CVE-2026-121617A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the fun ...11/04/202611/04/2026430465
CVE-2026-121616A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the ...11/04/202611/04/2026430464
CVE-2026-84730Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby att ...11/04/202611/04/2026430943
CVE-2026-84729Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to ...11/04/202611/04/2026430946
CVE-2026-121610A security flaw has been discovered in funadmin 7.1.0. Impacted is the function Curd::selectList ...11/04/202611/04/2026430447
CVE-2026-112116An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a loca ...11/04/202611/04/2026430945
CVE-2026-110464Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a spec ...11/04/202611/04/2026430944
CVE-2026-121615A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the ...11/04/202611/04/2026430463
CVE-2026-121609A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects ...11/04/202611/04/2026430446
CVE-2026-121608A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerab ...11/04/202611/04/2026430445
CVE-2026-121607A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects ...11/04/202611/04/2026430444
CVE-2026-121600A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability ...11/04/202611/04/2026430442
CVE-2026-121606A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to ...11/04/202611/04/2026430443
CVE-2026-121599A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function ...11/04/202611/04/2026430441
CVE-2026-121598A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impac ...11/04/202611/04/2026430440
CVE-2026-121597A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the funct ...11/04/202611/04/2026430439
CVE-2026-120651CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_U ...11/04/202611/04/2026430909
CVE-2026-120650CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforce ...11/04/202611/04/2026430908
CVE-2026-120648CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment. Argum ...11/04/202611/04/2026430923
CVE-2026-120647CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped do ...11/04/202611/04/2026430925
CVE-2026-120646CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferen ...11/04/202611/04/2026430942
CVE-2026-120645CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex f ...11/04/202611/04/2026430907
CVE-2026-120644CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, ...11/04/202611/04/2026430920
CVE-2026-120643CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in U ...11/04/202611/04/2026430929
CVE-2026-120642CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The ...11/04/202611/04/2026430921
CVE-2026-120641CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, includi ...11/04/202611/04/2026430919
CVE-2026-120640CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parame ...11/04/202611/04/2026430928
CVE-2026-120639CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newl ...11/04/202611/04/2026430917
CVE-2026-120638CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after ...11/04/202611/04/2026430918
CVE-2026-120637CGI versions before 5.00 for Perl take request parameters from the process command line argument ...11/04/202611/04/2026430922
CVE-2026-120636CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from ...11/04/202611/04/2026430916
CVE-2026-120635CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via mul ...11/04/202611/04/2026430915
CVE-2026-120634CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments ...11/04/202611/04/2026430914
CVE-2026-120633CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, vir ...11/04/202611/04/2026430912
CVE-2026-120632CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms mu ...11/04/202611/04/2026430910
CVE-2026-120631CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cooki ...11/04/202611/04/2026430911
CVE-2026-92211Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerabilit ...11/04/202611/04/2026426610
CVE-2026-92193Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vu ...11/04/202611/04/2026430902
CVE-2026-92190Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Cod ...11/04/202611/04/2026430905
CVE-2026-92188Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Executio ...11/04/202611/04/2026430903
CVE-2026-92187Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Exec ...11/04/202611/04/2026430899
CVE-2026-121589A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function Abstra ...11/04/202611/04/2026430430
CVE-2026-118628MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vuln ...11/04/202611/04/2026428745
CVE-2026-118627MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability ...11/04/202611/04/2026428740
CVE-2026-118626MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability. This vul ...11/04/202611/04/2026428741
CVE-2026-118625MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vulnerabil ...11/04/202611/04/2026428744
CVE-2026-118624MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability. This vul ...11/04/202611/04/2026428742
CVE-2026-118623MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerab ...11/04/202611/04/2026428743
CVE-2026-114552MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerabili ...11/04/202611/04/2026427644
CVE-2026-114551MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allow ...11/04/202611/04/2026427645
CVE-2026-114550libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vul ...11/04/202611/04/2026426609
CVE-2026-114549NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulne ...11/04/202611/04/2026425564
CVE-2026-92200Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerab ...11/04/202611/04/2026430926
CVE-2026-92199Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation V ...11/04/202611/04/2026430927
CVE-2026-92198Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vul ...11/04/202611/04/2026430913
CVE-2026-92197Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability. ...11/04/202611/04/2026430901
CVE-2026-92196Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Exe ...11/04/202611/04/2026430904
CVE-2026-92195Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnera ...11/04/202611/04/2026430898
CVE-2026-92194Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution V ...11/04/202611/04/2026430896
CVE-2026-92192Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerabil ...11/04/202611/04/2026430897
CVE-2026-92191Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerabili ...11/04/202611/04/2026430906
CVE-2026-92189Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Cod ...11/04/202611/04/2026430900
CVE-2026-92186Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Executi ...11/04/202611/04/2026430895
CVE-2026-92185Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosur ...11/04/202611/04/2026430924
CVE-2026-121585A security flaw has been discovered in InfiniFlow RAGFlow up to 0.27.2/1.0.0-rc2. This impacts t ...11/04/202611/04/2026430429
CVE-2026-121582A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file ...11/04/202611/04/2026430425
CVE-2026-121583A vulnerability was identified in Sanluan PublicCMS 5. This affects the function TradePaymentSer ...11/04/202611/04/2026430428
CVE-2026-118237An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git servic ...11/04/202611/04/2026430892
CVE-2026-110288A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allow ...11/04/202611/04/2026430883
CVE-2026-109836The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an ...11/04/202611/04/2026430894
CVE-2026-104608A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git serv ...11/04/202611/04/2026430882
CVE-2026-121736NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api ...11/04/202611/04/2026430887
CVE-2026-121735blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnera ...11/04/202611/04/2026430891
CVE-2026-121734ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any work ...11/04/202611/04/2026430889
CVE-2026-121733Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows authentica ...11/04/202611/04/2026430893
CVE-2026-121732RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scope ...11/04/202611/04/2026430886
CVE-2026-121731RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-stud ...11/04/202611/04/2026430881
CVE-2026-121730emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inb ...11/04/202611/04/2026430885
CVE-2026-121729emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox ser ...11/04/202611/04/2026430884
CVE-2026-121728SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that a ...11/04/202611/04/2026430890
CVE-2026-121727Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that ...11/04/202611/04/2026430888
CVE-2026-121581A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unkno ...11/03/202611/03/2026430416
CVE-2026-116668Tanium addressed an uncontrolled resource consumption vulnerability in Discover.11/03/202611/03/2026430877
CVE-2026-116666Tanium addressed an information disclosure vulnerability in Discover.11/03/202611/03/2026430878
CVE-2026-116661Tanium addressed an improper access controls vulnerability in Enforce.11/03/202611/03/2026430879
CVE-2026-116650Tanium addressed an unauthorized code execution vulnerability in Threat Response.11/03/202611/03/2026430880
CVE-2026-111085This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/03/202611/03/2026
 
CVE-2026-108516This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/03/202611/03/2026
 
CVE-2026-107916This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/03/202611/03/2026
 
CVE-2026-103429This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/03/202611/03/2026
 
CVE-2026-121539A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this ...11/03/202611/03/2026430300
CVE-2026-121614Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git confi ...11/03/202611/03/2026430863
CVE-2026-121542In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files ...11/03/202611/03/2026430862
CVE-2026-121541In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds mult ...11/03/202611/03/2026430861
CVE-2026-118865An authenticated OS command injection vulnerability exists in the Offline Download component (US ...11/03/202611/03/2026430858
CVE-2026-115541HumHub Community Edition 1.19.0 contains a stored cross-site scripting vulnerability in the frie ...11/03/202611/03/2026430868
CVE-2026-121522In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata ...11/03/202611/03/2026430856
CVE-2026-121565Tanium addressed an improper certificate validation vulnerability in multiple products. Products ...11/03/202611/03/2026430859
CVE-2026-121535A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affec ...11/03/202611/03/2026430291
CVE-2026-121520In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control AP ...11/03/202611/03/2026430857
CVE-2026-120775Tanium addressed a heap-based buffer overflow vulnerability in Deploy.11/03/202611/03/2026430875
CVE-2026-116669Tanium addressed an improper access controls vulnerability in Discover.11/03/202611/03/2026430876
CVE-2026-116667Tanium addressed an improper access controls vulnerability in Discover.11/03/202611/03/2026430871
CVE-2026-116665Tanium addressed an information disclosure vulnerability in Discover.11/03/202611/03/2026430870
CVE-2026-116664Tanium addressed an improper access controls vulnerability in Discover.11/03/202611/03/2026430867
CVE-2026-116663Tanium addressed an improper access controls vulnerability in Enforce.11/03/202611/03/2026430869
CVE-2026-116654Tanium addressed an improper input validation vulnerability in Threat Response.11/03/202611/03/2026430874
CVE-2026-116653Tanium addressed an improper input validation vulnerability in Threat Response.11/03/202611/03/2026430872
CVE-2026-116652Tanium addressed a business logic error in Threat Response.11/03/202611/03/2026430873
CVE-2026-116651Tanium addressed an unauthorized code execution vulnerability in Threat Response.11/03/202611/03/2026430866
CVE-2026-116648Tanium addressed an improper output sanitization vulnerability in Discover.11/03/202611/03/2026430864
CVE-2026-116646Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.11/03/202611/03/2026430865
CVE-2026-108327Tanium addressed a path traversal vulnerability in Tanium Data Service.11/03/202611/03/2026430860
CVE-2026-108324Tanium addressed a denial of service vulnerability in Tanium Client.11/03/202611/03/2026430855
CVE-2026-121524A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999 ...11/03/202611/03/2026430289
CVE-2026-22058StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with prod ...11/03/202611/03/2026430820
CVE-2026-22060All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations a ...11/03/202611/03/2026430822
CVE-2026-121531A vulnerability has been found in Umami 3.3.x/3.4.0/3.4.1. This affects an unknown part of the f ...11/03/202611/03/2026430290
CVE-2026-119084Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshif ...11/03/202611/03/2026430770
CVE-2026-112354Etrel INCH AC charging station management web interface prior to firmware versions 7.1.2 and 8.0 ...11/03/202611/03/2026430725
CVE-2026-120931Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a rem ...11/03/202611/03/2026430723
CVE-2026-120930Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attack ...11/03/202611/03/2026430724
CVE-2026-64672Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTo ...11/03/202611/03/2026420821
CVE-2026-121257Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430848
CVE-2026-121256Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430836
CVE-2026-121255Incorrect authorization in Autofill AI in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430847
CVE-2026-121254Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430850
CVE-2026-121253Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430846
CVE-2026-121252Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430844
CVE-2026-121251Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430854
CVE-2026-121250Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker l ...11/03/202611/03/2026430843
CVE-2026-121249Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430842
CVE-2026-121248Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430840
CVE-2026-121247Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430832
CVE-2026-121246Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430829
CVE-2026-121245Race condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430841
CVE-2026-121244UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430845
CVE-2026-121243Information leak in Frames in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430853
CVE-2026-121242Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remo ...11/03/202611/03/2026430839
CVE-2026-121241Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a rem ...11/03/202611/03/2026430722
CVE-2026-121240Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430837
CVE-2026-121239Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ob ...11/03/202611/03/2026430852
CVE-2026-121238Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430824
CVE-2026-121237Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430838
CVE-2026-121236Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote at ...11/03/202611/03/2026430835
CVE-2026-121235Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to o ...11/03/202611/03/2026430851
CVE-2026-121234Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a ...11/03/202611/03/2026430726
CVE-2026-121233Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430833
CVE-2026-121232Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker ...11/03/202611/03/2026430849
CVE-2026-121231Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430834
CVE-2026-121230Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to pot ...11/03/202611/03/2026430831
CVE-2026-121229Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remot ...11/03/202611/03/2026430720
CVE-2026-121228Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430828
CVE-2026-121227Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430821
CVE-2026-121226Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potent ...11/03/202611/03/2026430826
CVE-2026-121225Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430827
CVE-2026-121224Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430830
CVE-2026-121223Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430819
CVE-2026-121222Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430825
CVE-2026-121221Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potent ...11/03/202611/03/2026430823
CVE-2026-121220Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430807
CVE-2026-121219Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who ha ...11/03/202611/03/2026430806
CVE-2026-121218Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430805
CVE-2026-121217Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker ...11/03/202611/03/2026430812
CVE-2026-121216UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lev ...11/03/202611/03/2026430808
CVE-2026-121215UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430818
CVE-2026-121214Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430804
CVE-2026-121213Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430774
CVE-2026-121212Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430802
CVE-2026-121211Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430803
CVE-2026-121210Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430800
CVE-2026-121209UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430817
CVE-2026-121208Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430798
CVE-2026-121207Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remot ...11/03/202611/03/2026430775
CVE-2026-121206UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430799
CVE-2026-121205Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430801
CVE-2026-121204Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430816
CVE-2026-121203Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430797
CVE-2026-121202Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lev ...11/03/202611/03/2026430796
CVE-2026-121201Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430795
CVE-2026-121200Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a rem ...11/03/202611/03/2026430793
CVE-2026-121199Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a ...11/03/202611/03/2026430813
CVE-2026-121198Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lever ...11/03/202611/03/2026430792
CVE-2026-121197Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430791
CVE-2026-121196Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430794
CVE-2026-121195Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430790
CVE-2026-121194Missing authorization in SiteIsolation in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430787
CVE-2026-121193Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430789
CVE-2026-121190UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote atta ...11/03/202611/03/2026430786
CVE-2026-121189Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to e ...11/03/202611/03/2026430784
CVE-2026-121188Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430785
CVE-2026-121187Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430772
CVE-2026-121186UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a re ...11/03/202611/03/2026430788
CVE-2026-121185Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote atta ...11/03/202611/03/2026430783
CVE-2026-121184Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430781
CVE-2026-121183Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430782
CVE-2026-121182Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execu ...11/03/202611/03/2026430779
CVE-2026-121181Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to e ...11/03/202611/03/2026430778
CVE-2026-121180Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430777
CVE-2026-121179Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430815
CVE-2026-121178Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had ...11/03/202611/03/2026430811
CVE-2026-121177UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a rem ...11/03/202611/03/2026430810
CVE-2026-121176Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430780
CVE-2026-121175Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430814
CVE-2026-121174Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remot ...11/03/202611/03/2026430809
CVE-2026-121173Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430776
CVE-2026-121172Incorrect authorization in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430771
CVE-2026-121171Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker le ...11/03/202611/03/2026430763
CVE-2026-121170Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430730
CVE-2026-121169Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430764
CVE-2026-121168Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430729
CVE-2026-121167Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430766
CVE-2026-121166Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430762
CVE-2026-121165UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a r ...11/03/202611/03/2026430727
CVE-2026-121164Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a rem ...11/03/202611/03/2026430760
CVE-2026-121163Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote at ...11/03/202611/03/2026430761
CVE-2026-121162UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allo ...11/03/202611/03/2026430758
CVE-2026-121161Information leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430756
CVE-2026-121160Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430757
CVE-2026-121159Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote atta ...11/03/202611/03/2026430759
CVE-2026-121158Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to o ...11/03/202611/03/2026430755
CVE-2026-121157Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local at ...11/03/202611/03/2026430765
CVE-2026-121156Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to pot ...11/03/202611/03/2026430753
CVE-2026-121148Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to exe ...11/03/202611/03/2026430754
CVE-2026-121143Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430728
CVE-2026-121142Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote atta ...11/03/202611/03/2026430751
CVE-2026-121141Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote at ...11/03/202611/03/2026430749
CVE-2026-121140Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430750
CVE-2026-121138Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430768
CVE-2026-121137Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lev ...11/03/202611/03/2026430752
CVE-2026-121136Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430748
CVE-2026-121135Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430773
CVE-2026-121134Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430745
CVE-2026-121133Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allow ...11/03/202611/03/2026430747
CVE-2026-121132Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obta ...11/03/202611/03/2026430769
CVE-2026-121131Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lever ...11/03/202611/03/2026430744
CVE-2026-121130Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430731
CVE-2026-121129Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430743
CVE-2026-121128Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker t ...11/03/202611/03/2026430742
CVE-2026-121127Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430746
CVE-2026-121126Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to pote ...11/03/202611/03/2026430741
CVE-2026-121125Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430739
CVE-2026-121124Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a ...11/03/202611/03/2026430740
CVE-2026-121123Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430737
CVE-2026-121122UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430735
CVE-2026-121121UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430767
CVE-2026-121120Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430736
CVE-2026-121119Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430738
CVE-2026-121118Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execu ...11/03/202611/03/2026430734
CVE-2026-121117Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to exe ...11/03/202611/03/2026430732
CVE-2026-121116Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a ...11/03/202611/03/2026430721
CVE-2026-121115Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430733
CVE-2026-121114Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430718
CVE-2026-121113Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to e ...11/03/202611/03/2026430717
CVE-2026-121112Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430713
CVE-2026-121111Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430711
CVE-2026-121110UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a ...11/03/202611/03/2026430673
CVE-2026-121109Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430712
CVE-2026-121108Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote atta ...11/03/202611/03/2026430709
CVE-2026-121107Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a rem ...11/03/202611/03/2026430707
CVE-2026-121106Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remo ...11/03/202611/03/2026430676
CVE-2026-121105Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430714
CVE-2026-121104Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430708
CVE-2026-121103Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430710
CVE-2026-121102Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remot ...11/03/202611/03/2026430706
CVE-2026-121101Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430705
CVE-2026-121100Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execu ...11/03/202611/03/2026430704
CVE-2026-121099Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430702
CVE-2026-121098Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430701
CVE-2026-121097Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430700
CVE-2026-121096Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to rea ...11/03/202611/03/2026430716
CVE-2026-121095Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430675
CVE-2026-121094Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430703
CVE-2026-121093Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430699
CVE-2026-121092Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430697
CVE-2026-121091Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430698
CVE-2026-121090Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 al ...11/03/202611/03/2026430695
CVE-2026-121089Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to po ...11/03/202611/03/2026430693
CVE-2026-121088Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remot ...11/03/202611/03/2026430694
CVE-2026-121087Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430696
CVE-2026-121086Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to exe ...11/03/202611/03/2026430692
CVE-2026-121085Incorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430691
CVE-2026-121084Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who ...11/03/202611/03/2026430689
CVE-2026-121083Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430687
CVE-2026-121082Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430688
CVE-2026-121081UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430690
CVE-2026-121080Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to re ...11/03/202611/03/2026430686
CVE-2026-121079Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430684
CVE-2026-121078Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potent ...11/03/202611/03/2026430685
CVE-2026-121077Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lever ...11/03/202611/03/2026430682
CVE-2026-121076Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker levera ...11/03/202611/03/2026430680
CVE-2026-121075Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attac ...11/03/202611/03/2026430681
CVE-2026-121074Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430672
CVE-2026-121073Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to p ...11/03/202611/03/2026430683
CVE-2026-121072Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430674
CVE-2026-121071Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430679
CVE-2026-121070Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execu ...11/03/202611/03/2026430677
CVE-2026-121069Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to exe ...11/03/202611/03/2026430678
CVE-2026-82160Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization o ...11/03/202611/03/2026430719
CVE-2026-121621A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configur ...11/03/202611/03/2026430715
CVE-2026-121517A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is a ...11/03/202611/03/2026430288
CVE-2026-111751Angular is a development platform for building mobile and desktop web applications using TypeScr ...11/03/202611/03/2026422965
CVE-2026-121068Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430657
CVE-2026-121067UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed a remo ...11/03/202611/03/2026430656
CVE-2026-121066Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430654
CVE-2026-121065Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430655
CVE-2026-121064Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local ...11/03/202611/03/2026430660
CVE-2026-121063Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote ...11/03/202611/03/2026430658
CVE-2026-121062Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430653
CVE-2026-121061Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430651
CVE-2026-121060Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430652
CVE-2026-121059Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to le ...11/03/202611/03/2026430661
CVE-2026-121057Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430649
CVE-2026-121055Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430647
CVE-2026-121054Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430648
CVE-2026-121053UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103 ...11/03/202611/03/2026430627
CVE-2026-121052Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execu ...11/03/202611/03/2026430650
CVE-2026-121051UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remot ...11/03/202611/03/2026430646
CVE-2026-121050Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote atta ...11/03/202611/03/2026430644
CVE-2026-121049Out of bounds read in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to rea ...11/03/202611/03/2026430667
CVE-2026-121048Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execut ...11/03/202611/03/2026430645
CVE-2026-121047Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430642
CVE-2026-121046Incorrect authorization in WebAppInstalls in Google Chrome prior to 157.0.8103.38 allowed a remo ...11/03/202611/03/2026430640
CVE-2026-121045UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remo ...11/03/202611/03/2026430641
CVE-2026-121044Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ex ...11/03/202611/03/2026430643
CVE-2026-121043UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attack ...11/03/202611/03/2026430639
CVE-2026-121042Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 all ...11/03/202611/03/2026430630
CVE-2026-121041Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430637
CVE-2026-121040Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430638
CVE-2026-121039Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacen ...11/03/202611/03/2026430659
CVE-2026-121038Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacke ...11/03/202611/03/2026430635
CVE-2026-121037Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a rem ...11/03/202611/03/2026430633
CVE-2026-121036Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execu ...11/03/202611/03/2026430634
CVE-2026-121035Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430636
CVE-2026-121034Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote a ...11/03/202611/03/2026430632
CVE-2026-121033Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a re ...11/03/202611/03/2026430626
CVE-2026-121032Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to ...11/03/202611/03/2026430629
CVE-2026-121031Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker t ...11/03/202611/03/2026430631
CVE-2026-121030Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote att ...11/03/202611/03/2026430628
CVE-2026-121029Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker ...11/03/202611/03/2026430664
CVE-2026-120716Insertion of sensitive information into sent data in the identity provider user synchronization ...11/03/202611/03/2026430665
CVE-2026-119636Improper release of expired privileged access checkouts in the PAM scheduled check-in task in De ...11/03/202611/03/2026430666
CVE-2026-115779Effect is a TypeScript framework that consists of several packages that work together to help bu ...11/03/202611/03/2026430663
CVE-2026-115731Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Ser ...11/03/202611/03/2026430662
CVE-2026-55186Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the ...11/03/202611/03/2026428705
CVE-2026-28531This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/03/202611/03/2026
 
CVE-2026-121514A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function user ...11/03/202611/03/2026430286
CVE-2026-82161Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization o ...11/03/202611/03/2026430668
CVE-2026-82159Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization o ...11/03/202611/03/2026430669
CVE-2026-82158Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization o ...11/03/202611/03/2026430671
CVE-2026-111754Angular is a development platform for building mobile and desktop web applications using TypeScr ...11/03/202611/03/2026422835
CVE-2026-111752Angular is a development platform for building mobile and desktop web applications using TypeScr ...11/03/202611/03/2026422836
CVE-2026-121580Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22. ...11/03/202611/03/2026430624
CVE-2026-82155Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerabi ...11/03/202611/03/2026430623
CVE-2026-82154Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vu ...11/03/202611/03/2026430621
CVE-2026-76894CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore t ...11/03/202611/03/2026422312
CVE-2026-121509A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This affect ...11/03/202611/03/2026430285
CVE-2026-120734Cleartext transmission of sensitive information in the email configuration test in Devolutions S ...11/03/202611/03/2026430670
CVE-2026-120733Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3 ...11/03/202611/03/2026430625
CVE-2026-120715Server-side request forgery in the Active Directory credential validation in Devolutions Server ...11/03/202611/03/2026430622
CVE-2026-115732Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used ...11/03/202611/03/2026430620
CVE-2026-95860node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, na ...11/03/202611/03/2026430616
CVE-2026-61495TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability i ...11/03/202611/03/2026430618
CVE-2026-121502A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element ...11/03/202611/03/2026430284
CVE-2026-120959A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a quer ...11/03/202611/03/2026430619
CVE-2026-120952An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a p ...11/03/202611/03/2026430615
CVE-2026-61497TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descrip ...11/03/202611/03/2026430617
CVE-2026-61496This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.11/03/202611/03/2026
 
CVE-2026-115878Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsin ...11/03/202611/03/2026430614
CVE-2026-95777A sensitive information disclosure vulnerability exists in the management interface of HPE Netwo ...11/03/202611/03/2026430608
CVE-2026-95776An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Compose ...11/03/202611/03/2026430603
CVE-2026-95775A local information disclosure vulnerability exists in the underlying operating system of HPE Ne ...11/03/202611/03/2026430613
CVE-2026-95774A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer. Succe ...11/03/202611/03/2026430605
CVE-2026-95773A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer. Success ...11/03/202611/03/2026430612
CVE-2026-95772A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful e ...11/03/202611/03/2026430607
CVE-2026-95771An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networkin ...11/03/202611/03/2026430600
CVE-2026-95770A sensitive information disclosure vulnerability in the underlying operating system of HPE Netwo ...11/03/202611/03/2026430609
CVE-2026-95769An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Success ...11/03/202611/03/2026430606
CVE-2026-95768A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if cert ...11/03/202611/03/2026430604
CVE-2026-95767An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabr ...11/03/202611/03/2026430601
CVE-2026-95766Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow a ...11/03/202611/03/2026430602
CVE-2026-88968Claude Code is an agentic coding tool. Prior to 2.1.251, the Edit tool validates a target using ...11/03/202611/03/2026430610
CVE-2026-88066Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0 ...11/03/202611/03/2026430611
CVE-2026-95765A sensitive information disclosure vulnerability exists in the web-based management interface of ...11/03/202611/03/2026430554
CVE-2026-95764An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Comp ...11/03/202611/03/2026430580
CVE-2026-95763An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow a ...11/03/202611/03/2026430552
CVE-2026-95762An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Comp ...11/03/202611/03/2026430581
CVE-2026-95761An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Succe ...11/03/202611/03/2026430579
CVE-2026-95760A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if cert ...11/03/202611/03/2026430578
CVE-2026-95759Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful ...11/03/202611/03/2026430576
CVE-2026-95758An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Succe ...11/03/202611/03/2026430569
CVE-2026-95757A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. ...11/03/202611/03/2026430587
CVE-2026-95756A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could ...11/03/202611/03/2026430555
CVE-2026-95755Improper certificate validation vulnerabilities in the affected interface of HPE Networking Fabr ...11/03/202611/03/2026430572
CVE-2026-95753A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Succes ...11/03/202611/03/2026430567
CVE-2026-95752A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. ...11/03/202611/03/2026430592
CVE-2026-95751An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer co ...11/03/202611/03/2026430566
CVE-2026-95750An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow a ...11/03/202611/03/2026430563
CVE-2026-95749A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Success ...11/03/202611/03/2026430565
CVE-2026-95748A SQL injection vulnerability exists in HPE Networking Fabric Composer. Successful exploitation ...11/03/202611/03/2026430598
CVE-2026-95747A privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Compos ...11/03/202611/03/2026430577
CVE-2026-95746An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer cou ...11/03/202611/03/2026430582
CVE-2026-95745A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remo ...11/03/202611/03/2026430562
CVE-2026-95744A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fab ...11/03/202611/03/2026430553
CVE-2026-95743Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Netwo ...11/03/202611/03/2026430585
CVE-2026-95742An arbitrary file write vulnerability exists in the underlying operating system of HPE Networkin ...11/03/202611/03/2026430586
CVE-2026-95741A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Compos ...11/03/202611/03/2026430589
CVE-2026-95740An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow a ...11/03/202611/03/2026430561
CVE-2026-95739An improper restriction of excessive authentication attempts vulnerability in the API of HPE Net ...11/03/202611/03/2026430564
CVE-2026-95738Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Compose ...11/03/202611/03/2026430575
CVE-2026-95737A privilege escalation vulnerability exists in the underlying operating system of HPE Networking ...11/03/202611/03/2026430591
CVE-2026-95736Improper certificate validation vulnerabilities exist in the affected interface of HPE Networkin ...11/03/202611/03/2026430559
CVE-2026-95735An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Succe ...11/03/202611/03/2026430573
CVE-2026-95734A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer co ...11/03/202611/03/2026430574
CVE-2026-95733A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation ...11/03/202611/03/2026430584
CVE-2026-95732An authentication bypass vulnerability exists in the underlying operating system of HPE Networki ...11/03/202611/03/2026430571
CVE-2026-95731Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Compos ...11/03/202611/03/2026430570
CVE-2026-63434MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, when ...11/03/202611/03/2026430583
CVE-2026-63433MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, shoul ...11/03/202611/03/2026430560
CVE-2026-63395isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.3 ...11/03/202611/03/2026430558
CVE-2026-45146Chamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2.0.1, an authent ...11/03/202611/03/2026430551
CVE-2026-121577Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parse ...11/03/202611/03/2026430590
CVE-2026-95730A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated l ...11/03/202611/03/2026430588
CVE-2026-95729A sensitive information disclosure vulnerability exists in HPE Networking VIA. Successful exploi ...11/03/202611/03/2026430596
CVE-2026-95728An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client. Succes ...11/03/202611/03/2026430599
CVE-2026-95727A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could al ...11/03/202611/03/2026430568
CVE-2026-95726A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote atta ...11/03/202611/03/2026430556
CVE-2026-95725A command injection vulnerability exists in the VIA client for Linux. Successful exploitation co ...11/03/202611/03/2026430593
CVE-2026-95724An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Acces ...11/03/202611/03/2026430557
CVE-2026-95723A missing integrity verification vulnerability has been discovered in the Virtual Intranet Acces ...11/03/202611/03/2026430594

2025

CVEDescriptionSubmissionModerationEntry
CVE-2025-71439llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::pr ...11/05/202611/05/2026427029
CVE-2025-15702The Cloud Blocks WordPress plugin through 1.1.8 does not perform any authorisation or sanitisati ...11/05/202611/05/2026431377
CVE-2025-15701The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its set ...11/05/202611/05/2026431389
CVE-2025-66368Incorrect handling of SDP payload leads to a Denial of Service11/05/202611/05/2026431343
CVE-2025-66367Improper handling of NAS DLTransport messages may lead to a baseband crash.11/05/202611/05/2026431327
CVE-2025-66366Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash11/05/202611/05/2026431326
CVE-2025-66365Incorrect handling of SIP packets leads to baseband crashes11/05/202611/05/2026431319
CVE-2025-66364Continuously sending control‑plane messages causes the baseband to crashes.11/05/202611/05/2026431297
CVE-2025-71457vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthe ...11/04/202611/04/2026431189
CVE-2025-71456vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-pri ...11/04/202611/04/2026431193
CVE-2025-71455vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attack ...11/04/202611/04/2026431201
CVE-2025-71454vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_chec ...11/04/202611/04/2026431213
CVE-2025-71453vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/H ...11/04/202611/04/2026431204
CVE-2025-11229The system fails to properly enforce scope authorization when the `authorize_all_scopes` configu ...11/04/202611/04/2026430954
CVE-2025-71452Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in te ...11/03/202611/03/2026430595

2024

CVEDescriptionSubmissionModerationEntry
CVE-2024-58400llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and ...11/05/202611/05/2026427028
CVE-2024-58399llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that a ...11/05/202611/05/2026427030

2022

CVEDescriptionSubmissionModerationEntry
CVE-2022-30267Emerson Ovation  was found to have no authentication of firmware signing and relies on an insecu ...11/04/202611/04/2026267270
CVE-2022-29966Emerson Ovation has several protocols that have no authentication, which could allow an attacker ...11/04/202611/04/2026267269

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!