| CVE | Description | Soumission | Modérer | Entrée |
|---|
| CVE-2026-55554 | Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() m ... | 28/07/2026 | 28/07/2026 | 383987 |
| CVE-2026-3158 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 th ... | 28/07/2026 | 28/07/2026 | 383985 |
| CVE-2026-3157 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 th ... | 28/07/2026 | 28/07/2026 | 383984 |
| CVE-2026-1918 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 th ... | 28/07/2026 | 28/07/2026 | 383990 |
| CVE-2026-16347 | MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective sa ... | 28/07/2026 | | |
| CVE-2026-16192 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of ... | 28/07/2026 | 28/07/2026 | 383989 |
| CVE-2026-16184 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentica ... | 28/07/2026 | 28/07/2026 | 383986 |
| CVE-2026-16107 | IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates ... | 28/07/2026 | 28/07/2026 | 383988 |
| CVE-2026-57511 | SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthentic ... | 28/07/2026 | 28/07/2026 | 383981 |
| CVE-2026-57510 | SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the Canva ... | 28/07/2026 | 28/07/2026 | 383980 |
| CVE-2026-55555 | Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Exi ... | 28/07/2026 | 28/07/2026 | 383979 |
| CVE-2026-48060 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, ... | 28/07/2026 | 28/07/2026 | 383983 |
| CVE-2026-11391 | Tanium addressed a SQL injection vulnerability in Patch. | 28/07/2026 | 28/07/2026 | 383982 |
| CVE-2026-7769 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 th ... | 28/07/2026 | 28/07/2026 | 383978 |
| CVE-2026-7362 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Ste ... | 28/07/2026 | 28/07/2026 | 383973 |
| CVE-2026-66745 | Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session ... | 28/07/2026 | 28/07/2026 | 383972 |
| CVE-2026-5114 | The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in ... | 28/07/2026 | 28/07/2026 | 383969 |
| CVE-2026-4912 | The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Reque ... | 28/07/2026 | 28/07/2026 | 383977 |
| CVE-2026-49258 | Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3.5 and ... | 28/07/2026 | 28/07/2026 | 383971 |
| CVE-2026-48058 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ... | 28/07/2026 | 28/07/2026 | 383970 |
| CVE-2026-18107 | A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/resto ... | 28/07/2026 | 28/07/2026 | 383968 |
| CVE-2026-16771 | In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any serv ... | 28/07/2026 | 28/07/2026 | 383976 |
| CVE-2026-15992 | The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all version ... | 28/07/2026 | 28/07/2026 | 383974 |
| CVE-2026-15304 | The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin ... | 28/07/2026 | 28/07/2026 | 383975 |
| CVE-2026-59932 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0. ... | 28/07/2026 | 28/07/2026 | 383348 |
| CVE-2026-50738 | A use-after-free condition exists in pglogical's worker signaling code, where a worker stru ... | 28/07/2026 | 28/07/2026 | 383959 |
| CVE-2026-50737 | When applying replicated changes for a row that is missing one or more columns, pglogical evalua ... | 28/07/2026 | 28/07/2026 | 383962 |
| CVE-2026-50736 | The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a ... | 28/07/2026 | 28/07/2026 | 383961 |
| CVE-2026-50735 | pglogical's apply worker does not sufficiently validate the length of certain fields in inc ... | 28/07/2026 | 28/07/2026 | 383960 |
| CVE-2026-4932 | IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow ... | 28/07/2026 | 28/07/2026 | 383963 |
| CVE-2026-48396 | Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary co ... | 28/07/2026 | 28/07/2026 | 383967 |
| CVE-2026-48395 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code ... | 28/07/2026 | 28/07/2026 | 383966 |
| CVE-2026-48394 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code e ... | 28/07/2026 | 28/07/2026 | 383965 |
| CVE-2026-48393 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code e ... | 28/07/2026 | 28/07/2026 | 383964 |
| CVE-2026-48392 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code e ... | 28/07/2026 | 28/07/2026 | 383953 |
| CVE-2026-48391 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code ... | 28/07/2026 | 28/07/2026 | 383952 |
| CVE-2026-48390 | Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege es ... | 28/07/2026 | 28/07/2026 | 383956 |
| CVE-2026-48374 | Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path ... | 28/07/2026 | 28/07/2026 | 383951 |
| CVE-2026-47768 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ... | 28/07/2026 | 28/07/2026 | 383950 |
| CVE-2026-47726 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ... | 28/07/2026 | 28/07/2026 | 383949 |
| CVE-2026-47725 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ... | 28/07/2026 | 28/07/2026 | 383957 |
| CVE-2026-16498 | The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse i ... | 28/07/2026 | 28/07/2026 | 383955 |
| CVE-2026-16496 | The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the st ... | 28/07/2026 | 28/07/2026 | 383954 |
| CVE-2026-14869 | The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery iss ... | 28/07/2026 | 28/07/2026 | 383958 |
| CVE-2026-59933 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0. ... | 28/07/2026 | 28/07/2026 | 383350 |
| CVE-2026-59931 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0. ... | 28/07/2026 | 28/07/2026 | 383349 |
| CVE-2026-48388 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that ... | 28/07/2026 | 28/07/2026 | 383948 |
| CVE-2026-48372 | Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in ar ... | 28/07/2026 | 28/07/2026 | 383947 |
| CVE-2026-48025 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ... | 28/07/2026 | 28/07/2026 | 383946 |
| CVE-2026-54635 | pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the ... | 28/07/2026 | 28/07/2026 | 383945 |
| CVE-2026-67185 | TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attack ... | 28/07/2026 | 28/07/2026 | 383941 |
| CVE-2026-67184 | TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthentica ... | 28/07/2026 | 28/07/2026 | 383942 |
| CVE-2026-67183 | TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers ... | 28/07/2026 | 28/07/2026 | 383944 |
| CVE-2026-67182 | Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote ... | 28/07/2026 | 28/07/2026 | 383938 |
| CVE-2026-54620 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callb ... | 28/07/2026 | 28/07/2026 | 383940 |
| CVE-2026-54619 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, ... | 28/07/2026 | 28/07/2026 | 383939 |
| CVE-2026-54609 | QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1 ... | 28/07/2026 | 28/07/2026 | 383943 |
| CVE-2026-54605 | OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. Fro ... | 28/07/2026 | 28/07/2026 | 383929 |
| CVE-2026-54603 | OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Co ... | 28/07/2026 | 28/07/2026 | 383928 |
| CVE-2026-54345 | gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diame ... | 28/07/2026 | 28/07/2026 | 383934 |
| CVE-2026-54332 | gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ... | 28/07/2026 | 28/07/2026 | 383933 |
| CVE-2026-51275 | In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 APIC frame parsi ... | 28/07/2026 | 28/07/2026 | 383932 |
| CVE-2026-51274 | In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronize ... | 28/07/2026 | 28/07/2026 | 383930 |
| CVE-2026-51273 | In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the I ... | 28/07/2026 | 28/07/2026 | 383935 |
| CVE-2026-18085 | An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 ... | 28/07/2026 | 28/07/2026 | 383937 |
| CVE-2026-18084 | Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Mana ... | 28/07/2026 | 28/07/2026 | 383936 |
| CVE-2026-16313 | A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, output ... | 28/07/2026 | 28/07/2026 | 383931 |
| CVE-2026-8058 | IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply ... | 28/07/2026 | 28/07/2026 | 383920 |
| CVE-2026-7868 | IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users t ... | 28/07/2026 | 28/07/2026 | 383926 |
| CVE-2026-7775 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 thro ... | 28/07/2026 | 28/07/2026 | 383921 |
| CVE-2026-67181 | Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote ... | 28/07/2026 | 28/07/2026 | 383924 |
| CVE-2026-66754 | Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::remove_ ... | 28/07/2026 | 28/07/2026 | 383923 |
| CVE-2026-66753 | tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers t ... | 28/07/2026 | 28/07/2026 | 383925 |
| CVE-2026-66752 | tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote att ... | 28/07/2026 | 28/07/2026 | 383922 |
| CVE-2026-66751 | Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows ... | 28/07/2026 | 28/07/2026 | 383927 |
| CVE-2026-66750 | Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows a ... | 28/07/2026 | 28/07/2026 | 383916 |
| CVE-2026-66749 | Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authen ... | 28/07/2026 | 28/07/2026 | 383918 |
| CVE-2026-66746 | Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote ... | 28/07/2026 | 28/07/2026 | 383915 |
| CVE-2026-61609 | Pterodactyl is a free, open-source game server management panel. From 1.7.0 until 1.13.0, the au ... | 28/07/2026 | 28/07/2026 | 383914 |
| CVE-2026-54593 | Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 a ... | 28/07/2026 | 28/07/2026 | 383911 |
| CVE-2026-51271 | In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow vulnerability exists in the W ... | 28/07/2026 | 28/07/2026 | 383913 |
| CVE-2026-47483 | NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, w ... | 28/07/2026 | 28/07/2026 | 383912 |
| CVE-2026-47427 | GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler f ... | 28/07/2026 | 28/07/2026 | 383917 |
| CVE-2026-45293 | WordPress Coding Standards is a set of PHP_CodeSniffer rules (sniffs) that enforce WordPress cod ... | 28/07/2026 | 28/07/2026 | 383910 |
| CVE-2026-43910 | Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C ... | 28/07/2026 | 28/07/2026 | 383919 |
| CVE-2026-66748 | Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulner ... | 28/07/2026 | 28/07/2026 | 383906 |
| CVE-2026-62828 | Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perfo ... | 28/07/2026 | 28/07/2026 | 383905 |
| CVE-2026-54545 | wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sa ... | 28/07/2026 | 28/07/2026 | 383909 |
| CVE-2026-51270 | schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the htmlToUT ... | 28/07/2026 | 28/07/2026 | 383907 |
| CVE-2026-51269 | schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the connectt ... | 28/07/2026 | 28/07/2026 | 383908 |
| CVE-2026-51268 | schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the host par ... | 28/07/2026 | 28/07/2026 | 383904 |
| CVE-2026-51267 | schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path ... | 28/07/2026 | 28/07/2026 | 383902 |
| CVE-2026-51266 | schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the HTTP req ... | 28/07/2026 | 28/07/2026 | 383901 |
| CVE-2026-51263 | schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openai_speech fun ... | 28/07/2026 | 28/07/2026 | 383903 |
| CVE-2026-8164 | Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and T ... | 28/07/2026 | 28/07/2026 | 383900 |
| CVE-2026-7521 | Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fa ... | 28/07/2026 | 28/07/2026 | 383899 |
| CVE-2026-6879 | `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity whe ... | 28/07/2026 | 28/07/2026 | 383898 |
| CVE-2026-67178 | MISP installation scripts generated an Apache HTTP virtual-host configuration containing an inco ... | 28/07/2026 | 28/07/2026 | 383897 |
| CVE-2026-67174 | Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resol ... | 28/07/2026 | 28/07/2026 | 383895 |
| CVE-2026-66713 | Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component in Apache ... | 28/07/2026 | 28/07/2026 | 383888 |
| CVE-2026-66299 | Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. ... | 28/07/2026 | 28/07/2026 | 383887 |
| CVE-2026-63727 | Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escala ... | 28/07/2026 | 28/07/2026 | 383892 |
| CVE-2026-51261 | Missing mutex synchronization in AudioBuffer::freeSpace() in schreibfaul1 ESP32-audioI2S 3.4.5 c ... | 28/07/2026 | 28/07/2026 | 383893 |
| CVE-2026-51260 | Unsafe fixed-size memcpy operation in AudioBuffer::writeSpace() of schreibfaul1 ESP32-audioI2S 3 ... | 28/07/2026 | 28/07/2026 | 383891 |
| CVE-2026-51259 | Unchecked unsigned integer overflow in buffer size calculation in schreibfaul1 ESP32-audioI2S 3. ... | 28/07/2026 | 28/07/2026 | 383890 |
| CVE-2026-51254 | schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::Get ... | 28/07/2026 | 28/07/2026 | 383889 |
| CVE-2026-51252 | schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackS ... | 28/07/2026 | 28/07/2026 | 383896 |
| CVE-2026-51251 | Schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::decode( ... | 28/07/2026 | 28/07/2026 | 383894 |
| CVE-2026-67173 | Pivotick did not validate the URL scheme of node imagePath values derived from graph data before ... | 28/07/2026 | 28/07/2026 | 383878 |
| CVE-2026-66922 | Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node ... | 28/07/2026 | 28/07/2026 | 383876 |
| CVE-2026-66921 | Pivotick s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeNa ... | 28/07/2026 | 28/07/2026 | 383879 |
| CVE-2026-61487 | Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache Acti ... | 28/07/2026 | 28/07/2026 | 383877 |
| CVE-2026-59878 | Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveM ... | 28/07/2026 | 28/07/2026 | 383874 |
| CVE-2026-7187 | Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allow ... | 28/07/2026 | 28/07/2026 | 383885 |
| CVE-2026-66920 | Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph ... | 28/07/2026 | 28/07/2026 | 383884 |
| CVE-2026-66919 | Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. Node ... | 28/07/2026 | 28/07/2026 | 383886 |
| CVE-2026-66918 | Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.sv ... | 28/07/2026 | 28/07/2026 | 383882 |
| CVE-2026-65882 | Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url p ... | 28/07/2026 | 28/07/2026 | 383883 |
| CVE-2026-65881 | Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account a ... | 28/07/2026 | 28/07/2026 | 383875 |
| CVE-2026-62436 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383881 |
| CVE-2026-62435 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383880 |
| CVE-2026-62434 | A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren&# ... | 28/07/2026 | 28/07/2026 | 383872 |
| CVE-2026-62433 | Parts of the DM_OP handling code assumes the caller has provided the required number of buffers ... | 28/07/2026 | 28/07/2026 | 383868 |
| CVE-2026-62432 | The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but with ... | 28/07/2026 | 28/07/2026 | 383871 |
| CVE-2026-62431 | The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-control ... | 28/07/2026 | 28/07/2026 | 383873 |
| CVE-2026-62430 | Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen nee ... | 28/07/2026 | 28/07/2026 | 383866 |
| CVE-2026-62429 | Accessing the vNUMA configuration data of a guest is still possible when domain destruction has ... | 28/07/2026 | 28/07/2026 | 383870 |
| CVE-2026-62428 | When grant-copy operations are processed, the respective grant may or may not already be in use ... | 28/07/2026 | 28/07/2026 | 383867 |
| CVE-2026-62427 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383865 |
| CVE-2026-62426 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383864 |
| CVE-2026-62425 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383869 |
| CVE-2026-62424 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383863 |
| CVE-2026-62423 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383862 |
| CVE-2026-42495 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383861 |
| CVE-2026-42494 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi ... | 28/07/2026 | 28/07/2026 | 383860 |
| CVE-2026-42493 | Addressing certain issues, in particular related to operations which may take excessively long a ... | 28/07/2026 | 28/07/2026 | 383856 |
| CVE-2026-42492 | Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing ... | 28/07/2026 | 28/07/2026 | 383855 |
| CVE-2026-18047 | A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use ... | 28/07/2026 | 28/07/2026 | 383859 |
| CVE-2026-18038 | A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is ... | 28/07/2026 | 28/07/2026 | 383813 |
| CVE-2026-15393 | The Cozy Blocks Page Builder for Gutenberg Editor FSE with 600+ Patterns, 58 Blocks Templa ... | 28/07/2026 | 28/07/2026 | 383858 |
| CVE-2026-15016 | The Paid Memberships Pro Content Restriction, User Registration, Paid Subscriptions plugin f ... | 28/07/2026 | 28/07/2026 | 383857 |
| CVE-2026-66913 | Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compre ... | 28/07/2026 | 28/07/2026 | 383853 |
| CVE-2026-49332 | A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using o ... | 28/07/2026 | 28/07/2026 | 383852 |
| CVE-2026-41874 | Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw all ... | 28/07/2026 | 28/07/2026 | 383854 |
| CVE-2026-4648 | Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands f ... | 28/07/2026 | 28/07/2026 | 383849 |
| CVE-2026-21047 | Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to pot ... | 28/07/2026 | 28/07/2026 | 383851 |
| CVE-2026-16774 | The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and i ... | 28/07/2026 | 28/07/2026 | 383844 |
| CVE-2026-16773 | The WPBot AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vu ... | 28/07/2026 | 28/07/2026 | 383846 |
| CVE-2026-15444 | The Tutor LMS eLearning and online course solution plugin for WordPress is vulnerable to gener ... | 28/07/2026 | 28/07/2026 | 383845 |
| CVE-2026-15411 | The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick Vie ... | 28/07/2026 | 28/07/2026 | 383848 |
| CVE-2026-15025 | The Uncanny Automator Easy Automation, Integration, Webhooks Workflow Builder plugin for Wor ... | 28/07/2026 | 28/07/2026 | 383843 |
| CVE-2026-13440 | The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick Vie ... | 28/07/2026 | 28/07/2026 | 383850 |
| CVE-2026-13110 | The Storegrowth Sales Booster plugin for WordPress is vulnerable to Missing Authorization in ver ... | 28/07/2026 | 28/07/2026 | 383847 |
| CVE-2026-65880 | Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 ... | 28/07/2026 | 28/07/2026 | 383837 |
| CVE-2026-63303 | A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP reques ... | 28/07/2026 | 28/07/2026 | 383841 |
| CVE-2026-63302 | Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parame ... | 28/07/2026 | 28/07/2026 | 383836 |
| CVE-2026-63301 | In Quick.CMS, the administrative user interface restricts deletion of the primary language by om ... | 28/07/2026 | 28/07/2026 | 383842 |
| CVE-2026-18029 | Our payment integration with GiroCheckout did not properly validate payment status responses. A ... | 28/07/2026 | 28/07/2026 | 383840 |
| CVE-2026-18028 | The quick setup view presented to users after they first create an event allows to set up the ... | 28/07/2026 | 28/07/2026 | 383839 |
| CVE-2026-17072 | A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 byte ... | 28/07/2026 | 28/07/2026 | 383838 |
| CVE-2026-65624 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an ... | 28/07/2026 | 28/07/2026 | 383829 |
| CVE-2026-59248 | Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticat ... | 28/07/2026 | 28/07/2026 | 383827 |
| CVE-2026-58246 | SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier ... | 28/07/2026 | 28/07/2026 | 383828 |
| CVE-2026-16462 | In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows ... | 28/07/2026 | 28/07/2026 | 383835 |
| CVE-2026-14785 | The Web Directory Free plugin for WordPress is vulnerable to generic SQL Injection via the ' ... | 28/07/2026 | 28/07/2026 | 383831 |
| CVE-2026-14328 | The Eazy Plugin Manager Powerful Plugin Management Solution for WordPress plugin for WordPress ... | 28/07/2026 | 28/07/2026 | 383833 |
| CVE-2026-11841 | An attacker may perform unauthenticated read and write operations on sensitive filesystem areas ... | 28/07/2026 | 28/07/2026 | 383832 |
| CVE-2026-11598 | The Shortcodify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'name ... | 28/07/2026 | 28/07/2026 | 383834 |
| CVE-2026-10207 | The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions ... | 28/07/2026 | 28/07/2026 | 383830 |
| CVE-2026-9680 | Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attacke ... | 28/07/2026 | 28/07/2026 | 383825 |
| CVE-2026-8167 | Improper neutralization of input during web page generation ('cross-site scripting') v ... | 28/07/2026 | 28/07/2026 | 383826 |
| CVE-2026-61376 | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerabil ... | 28/07/2026 | 28/07/2026 | 383824 |
| CVE-2026-59764 | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerabil ... | 28/07/2026 | 28/07/2026 | 383823 |
| CVE-2026-44387 | ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting v ... | 28/07/2026 | 28/07/2026 | 383820 |
| CVE-2026-15267 | The Taskbuilder Project Management Task Management Tool With Kanban Board plugin for WordPre ... | 28/07/2026 | 28/07/2026 | 383814 |
| CVE-2026-14516 | The Online Scheduling and Appointment Booking System Bookly plugin for WordPress is vulnerable ... | 28/07/2026 | 28/07/2026 | 383819 |
| CVE-2026-14171 | An unauthenticated remote attacker can abuse the improper validation of the post-login redirect ... | 28/07/2026 | 28/07/2026 | 383818 |
CVE-2026-14170 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 28/07/2026 | 28/07/2026 | |
| CVE-2026-14169 | Due to incorrect behavior order a low privileged remote attacker could trigger account inconsist ... | 28/07/2026 | 28/07/2026 | 383817 |
| CVE-2026-14168 | A low privileged remote attacker can gain administrator privileges due to missing authorization ... | 28/07/2026 | 28/07/2026 | 383822 |
| CVE-2026-14167 | A low privileged remote attacker can perform privileged configuration changes reserved for the a ... | 28/07/2026 | 28/07/2026 | 383821 |
| CVE-2026-13161 | The TrueBooker Appointment Booking and Scheduler System plugin for WordPress is vulnerable to ... | 28/07/2026 | 28/07/2026 | 383816 |
| CVE-2026-12800 | The Premium Packages Sell Digital Products Securely plugin for WordPress is vulnerable to SQL ... | 28/07/2026 | 28/07/2026 | 383815 |
| CVE-2026-55977 | Successful exploitation of this vulnerability could allow an attacker with local network access ... | 28/07/2026 | 28/07/2026 | 383812 |
| CVE-2026-12741 | The WP Fast Total Search The Power of Indexed Search plugin for WordPress is vulnerable to gen ... | 28/07/2026 | 28/07/2026 | 383809 |
| CVE-2026-11756 | A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE ... | 28/07/2026 | 28/07/2026 | 383811 |
| CVE-2026-15730 | The GamiPress Gamification plugin to reward points, achievements, badges ranks in WordPress ... | 28/07/2026 | 28/07/2026 | 383808 |
| CVE-2026-15673 | The SMS Alert SMS OTP for WooCommerce, Order Notifications Abandoned Cart Recovery plugin ... | 28/07/2026 | 28/07/2026 | 383807 |
| CVE-2026-15671 | The SMS Alert SMS OTP for WooCommerce, Order Notifications Abandoned Cart Recovery plugin ... | 28/07/2026 | 28/07/2026 | 383806 |
| CVE-2026-15670 | The SMS Alert SMS OTP for WooCommerce, Order Notifications Abandoned Cart Recovery plugin ... | 28/07/2026 | 28/07/2026 | 383805 |
| CVE-2026-15014 | The SMS Alert SMS OTP for WooCommerce, Order Notifications Abandoned Cart Recovery plugin ... | 28/07/2026 | 28/07/2026 | 383804 |
| CVE-2026-6251 | The Chaty Pro plugin for WordPress is vulnerable to Authenticated Time-Based Blind SQL Injection ... | 28/07/2026 | 28/07/2026 | 383801 |
| CVE-2026-16811 | The ShopLentor All-in-One WooCommerce Growth Store Enhancement Plugin plugin for WordPress i ... | 28/07/2026 | 28/07/2026 | 383803 |
| CVE-2026-16797 | The ShopLentor All-in-One WooCommerce Growth Store Enhancement Plugin plugin for WordPress i ... | 28/07/2026 | 28/07/2026 | 383802 |
| CVE-2026-16587 | The Advanced Form Integration Connect Forms to 200+ Apps plugin for WordPress is vulnerable to ... | 28/07/2026 | 28/07/2026 | 383800 |
| CVE-2026-16585 | The Better Messages Chat Rooms, Group Chat, Private Messages AI Chat Bots plugin for WordPre ... | 28/07/2026 | 28/07/2026 | 383799 |
| CVE-2026-15136 | The Cookie Banner for GDPR / CCPA WPLP Cookie Consent plugin for WordPress is vulnerable to Cr ... | 28/07/2026 | 28/07/2026 | 383798 |
| CVE-2026-15012 | The Demi One Click Demo Import, WP Backup Site Migration plugin for WordPress is vulnerable ... | 28/07/2026 | 28/07/2026 | 383790 |
| CVE-2026-14926 | The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a subs ... | 28/07/2026 | 28/07/2026 | 383789 |
| CVE-2026-14924 | The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capabil ... | 28/07/2026 | 28/07/2026 | 383795 |
| CVE-2026-14870 | The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not ... | 28/07/2026 | 28/07/2026 | 383797 |
| CVE-2026-14821 | The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability c ... | 28/07/2026 | 28/07/2026 | 383794 |
| CVE-2026-14819 | The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event ... | 28/07/2026 | 28/07/2026 | 383796 |
| CVE-2026-14545 | The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting ... | 28/07/2026 | 28/07/2026 | 383793 |
| CVE-2026-14490 | The Demi One Click Demo Import, WP Backup Site Migration plugin for WordPress is vulnerable ... | 28/07/2026 | 28/07/2026 | 383792 |
| CVE-2026-12124 | The PDFDraft Drag Drop PDF Builder, PDF Viewer, Embed Download PDF, Certificate Invoice ... | 28/07/2026 | 28/07/2026 | 383791 |
| CVE-2026-17528 | Versions of the package nice-select2 before 2.4.1 are vulnerable to Cross-site Scripting (XSS) v ... | 28/07/2026 | 28/07/2026 | 383788 |
| CVE-2026-17524 | Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the cachi ... | 28/07/2026 | 28/07/2026 | 383787 |
| CVE-2026-66473 | Unauthenticated Broken Access Control in Xendit Payment = 7.1.0 versions. | 28/07/2026 | 28/07/2026 | 383779 |
| CVE-2026-65448 | Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner AcyChecker = 1.8.1 v ... | 28/07/2026 | 28/07/2026 | 383786 |
| CVE-2026-65447 | Unauthenticated Cross Site Scripting (XSS) in Contest Gallery = 30.0.6 versions. | 28/07/2026 | 28/07/2026 | 383785 |
| CVE-2026-65446 | Unauthenticated Cross Site Scripting (XSS) in Kali Forms = 2.4.18 versions. | 28/07/2026 | 28/07/2026 | 383784 |
| CVE-2026-65445 | Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) = 1.3.0 versions. | 28/07/2026 | 28/07/2026 | 383769 |
| CVE-2026-65443 | Unauthenticated Cross Site Scripting (XSS) in BackWPup = 5.7.4 versions. | 28/07/2026 | 28/07/2026 | 383778 |
| CVE-2026-65442 | Unauthenticated Server Side Request Forgery (SSRF) in FormCraft = 3.9.15 versions. | 28/07/2026 | 28/07/2026 | 383771 |
| CVE-2026-65441 | Unauthenticated Cross Site Scripting (XSS) in GiveWP = 4.16.3 versions. | 28/07/2026 | 28/07/2026 | 383777 |
| CVE-2026-65440 | Unauthenticated Cross Site Scripting (XSS) in GetGenie = 4.4.3 versions. | 28/07/2026 | 28/07/2026 | 383776 |
| CVE-2026-65439 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 =3.5.45 versions. | 28/07/2026 | 28/07/2026 | 383775 |
| CVE-2026-65438 | Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 = 1.6.3.9 versions. | 28/07/2026 | 28/07/2026 | 383774 |
| CVE-2026-65437 | Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk ... | 28/07/2026 | 28/07/2026 | 383773 |
| CVE-2026-61957 | Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification = 5.5.1 versions. | 28/07/2026 | 28/07/2026 | 383772 |
| CVE-2026-61953 | Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro = 15.0.6 versions. | 28/07/2026 | 28/07/2026 | 383770 |
| CVE-2026-66825 | Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. V ... | 28/07/2026 | 28/07/2026 | 383782 |
| CVE-2026-66824 | A stored cross-site scripting vulnerability existed in the capture tree visualization page. The ... | 28/07/2026 | 28/07/2026 | 383781 |
| CVE-2026-64783 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Saf ... | 28/07/2026 | 28/07/2026 | 383780 |
| CVE-2026-64776 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8 ... | 28/07/2026 | 28/07/2026 | 383783 |
| CVE-2026-64775 | A memory initialization issue was addressed with improved memory handling. This issue is fixed i ... | 28/07/2026 | 28/07/2026 | 383768 |
| CVE-2026-64774 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26. ... | 28/07/2026 | 28/07/2026 | 383764 |
| CVE-2026-64772 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed i ... | 28/07/2026 | 28/07/2026 | 383763 |
| CVE-2026-64771 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 a ... | 28/07/2026 | 28/07/2026 | 383762 |
| CVE-2026-64770 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 28/07/2026 | 28/07/2026 | 383761 |
| CVE-2026-64769 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 28/07/2026 | 28/07/2026 | 383760 |
| CVE-2026-64768 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in ... | 28/07/2026 | 28/07/2026 | 383767 |
| CVE-2026-64767 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequ ... | 28/07/2026 | 28/07/2026 | 383759 |
| CVE-2026-64766 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26. ... | 28/07/2026 | 28/07/2026 | 383766 |
| CVE-2026-64765 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26. ... | 28/07/2026 | 28/07/2026 | 383765 |
| CVE-2026-64764 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 28/07/2026 | 28/07/2026 | 383755 |
| CVE-2026-64763 | An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed ... | 28/07/2026 | 28/07/2026 | 383754 |
| CVE-2026-64762 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS ... | 28/07/2026 | 28/07/2026 | 383757 |
| CVE-2026-64758 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS ... | 28/07/2026 | 28/07/2026 | 383756 |
| CVE-2026-64757 | A memory corruption issue was addressed with improved state management. This issue is fixed in S ... | 28/07/2026 | 28/07/2026 | 383752 |
| CVE-2026-64755 | An authorization issue was addressed with improved state management. This issue is fixed in iOS ... | 28/07/2026 | 28/07/2026 | 383758 |
| CVE-2026-64754 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 28/07/2026 | 28/07/2026 | 383751 |
| CVE-2026-64751 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 28/07/2026 | 28/07/2026 | 383753 |
| CVE-2026-51565 | Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9. ... | 28/07/2026 | 28/07/2026 | 383749 |
| CVE-2026-64749 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 28/07/2026 | 28/07/2026 | 383746 |
| CVE-2026-64747 | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.6 a ... | 28/07/2026 | 28/07/2026 | 383745 |
| CVE-2026-64746 | An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.6 a ... | 28/07/2026 | 28/07/2026 | 383747 |
| CVE-2026-53669 | React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirte ... | 28/07/2026 | 28/07/2026 | 383345 |
| CVE-2026-51564 | An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect use ... | 28/07/2026 | 28/07/2026 | 383748 |
| CVE-2026-64745 | This issue was addressed with additional restrictions on the lock screen. This issue is fixed in ... | 28/07/2026 | 28/07/2026 | 383739 |
| CVE-2026-64744 | An information leakage was addressed with additional validation. This issue is fixed in macOS Se ... | 28/07/2026 | 28/07/2026 | 383731 |
| CVE-2026-64743 | An authorization issue was addressed with improved state management. This issue is fixed in iOS ... | 28/07/2026 | 28/07/2026 | 383738 |
| CVE-2026-64742 | This issue was addressed by using HTTPS when sending information over the network. This issue is ... | 28/07/2026 | 28/07/2026 | 383737 |
| CVE-2026-64741 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 ... | 28/07/2026 | 28/07/2026 | 383736 |
| CVE-2026-64740 | A parsing issue in the handling of directory paths was addressed with improved path validation. ... | 28/07/2026 | 28/07/2026 | 383735 |
| CVE-2026-64739 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 28/07/2026 | 28/07/2026 | 383734 |
| CVE-2026-64738 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Seq ... | 28/07/2026 | 28/07/2026 | 383733 |
| CVE-2026-64737 | An authorization issue was addressed with improved state management. This issue is fixed in macO ... | 28/07/2026 | 28/07/2026 | 383732 |
| CVE-2026-64735 | An inconsistent user interface issue was addressed with improved state management. This issue is ... | 28/07/2026 | 28/07/2026 | 383730 |
| CVE-2026-64734 | The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, m ... | 27/07/2026 | 28/07/2026 | 383725 |
| CVE-2026-64733 | This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPad ... | 27/07/2026 | 28/07/2026 | 383728 |
| CVE-2026-64732 | This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and ... | 27/07/2026 | 28/07/2026 | 383727 |
| CVE-2026-64731 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequo ... | 27/07/2026 | 28/07/2026 | 383729 |
| CVE-2026-64730 | The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadO ... | 27/07/2026 | 28/07/2026 | 383724 |
| CVE-2026-59240 | The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotification ... | 27/07/2026 | 28/07/2026 | 383723 |
| CVE-2026-55685 | React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint coul ... | 27/07/2026 | 28/07/2026 | 383722 |
| CVE-2026-53668 | React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, ... | 27/07/2026 | 28/07/2026 | 383726 |
| CVE-2026-51078 | An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the ... | 27/07/2026 | 28/07/2026 | 383721 |
| CVE-2026-51077 | SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive i ... | 27/07/2026 | 28/07/2026 | 383720 |
| CVE-2026-64729 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 28/07/2026 | 383717 |
| CVE-2026-64728 | A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, ... | 27/07/2026 | 28/07/2026 | 383711 |
| CVE-2026-64727 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383719 |
| CVE-2026-64726 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 28/07/2026 | 383712 |
| CVE-2026-64725 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 27/07/2026 | 28/07/2026 | 383716 |
| CVE-2026-64724 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 28/07/2026 | 383715 |
| CVE-2026-64723 | A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, m ... | 27/07/2026 | 28/07/2026 | 383718 |
| CVE-2026-64722 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS ... | 27/07/2026 | 28/07/2026 | 383710 |
| CVE-2026-64721 | This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and ... | 27/07/2026 | 28/07/2026 | 383714 |
| CVE-2026-64720 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and ... | 27/07/2026 | 28/07/2026 | 383713 |
| CVE-2026-64719 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed i ... | 27/07/2026 | 28/07/2026 | 383705 |
| CVE-2026-64718 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Saf ... | 27/07/2026 | 28/07/2026 | 383704 |
| CVE-2026-64716 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 28/07/2026 | 383703 |
| CVE-2026-64713 | This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and ... | 27/07/2026 | 28/07/2026 | 383702 |
| CVE-2026-64711 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and ... | 27/07/2026 | 28/07/2026 | 383708 |
| CVE-2026-64710 | A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 1 ... | 27/07/2026 | 28/07/2026 | 383707 |
| CVE-2026-64709 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 28/07/2026 | 383706 |
| CVE-2026-64708 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequ ... | 27/07/2026 | 28/07/2026 | 383709 |
| CVE-2026-53667 | React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is mi ... | 27/07/2026 | 28/07/2026 | 383700 |
| CVE-2026-53666 | React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was wr ... | 27/07/2026 | 28/07/2026 | 383701 |
| CVE-2026-64707 | A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and ... | 27/07/2026 | 28/07/2026 | 383651 |
| CVE-2026-64704 | A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383650 |
| CVE-2026-64703 | A use after free issue was addressed with improved memory management. This issue is fixed in mac ... | 27/07/2026 | 28/07/2026 | 383649 |
| CVE-2026-64702 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383648 |
| CVE-2026-64700 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 28/07/2026 | 383647 |
| CVE-2026-64699 | A memory initialization issue was addressed with improved memory handling. This issue is fixed i ... | 27/07/2026 | 27/07/2026 | 383633 |
| CVE-2026-64698 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383635 |
| CVE-2026-64697 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383634 |
| CVE-2026-64696 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383620 |
| CVE-2026-64695 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383619 |
| CVE-2026-64694 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS S ... | 27/07/2026 | 28/07/2026 | 383646 |
| CVE-2026-64693 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.6 and i ... | 27/07/2026 | 27/07/2026 | 383628 |
| CVE-2026-64692 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 ... | 27/07/2026 | 28/07/2026 | 383645 |
| CVE-2026-64691 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Taho ... | 27/07/2026 | 28/07/2026 | 383699 |
| CVE-2026-64555 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 ... | 27/07/2026 | 27/07/2026 | 383616 |
| CVE-2026-64554 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale ... | 27/07/2026 | 27/07/2026 | 383601 |
| CVE-2026-64553 | In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak ... | 27/07/2026 | 27/07/2026 | 383615 |
| CVE-2026-64552 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in ... | 27/07/2026 | 27/07/2026 | 383614 |
| CVE-2026-64551 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE ... | 27/07/2026 | 27/07/2026 | 383607 |
| CVE-2026-64550 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: valida ... | 27/07/2026 | 27/07/2026 | 383606 |
| CVE-2026-64549 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bpa10x: avoid OOB ... | 27/07/2026 | 27/07/2026 | 383605 |
| CVE-2026-64548 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflo ... | 27/07/2026 | 27/07/2026 | 383613 |
| CVE-2026-64547 | In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate ... | 27/07/2026 | 27/07/2026 | 383612 |
| CVE-2026-64546 | In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in dr ... | 27/07/2026 | 27/07/2026 | 383611 |
| CVE-2026-64545 | In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for N ... | 27/07/2026 | 27/07/2026 | 383604 |
| CVE-2026-64544 | In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fi ... | 27/07/2026 | 27/07/2026 | 383610 |
| CVE-2026-64543 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of ... | 27/07/2026 | 27/07/2026 | 383617 |
| CVE-2026-64542 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref ... | 27/07/2026 | 27/07/2026 | 383603 |
| CVE-2026-64541 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_ ... | 27/07/2026 | 27/07/2026 | 383602 |
| CVE-2026-64540 | In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-b ... | 27/07/2026 | 27/07/2026 | 383609 |
| CVE-2026-64539 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OO ... | 27/07/2026 | 27/07/2026 | 383618 |
| CVE-2026-64538 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in ... | 27/07/2026 | 27/07/2026 | 383600 |
| CVE-2026-64537 | In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: reject invalid ... | 27/07/2026 | 27/07/2026 | 383608 |
| CVE-2026-59730 | Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when tra ... | 27/07/2026 | 27/07/2026 | 383632 |
| CVE-2026-59728 | Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the sour ... | 27/07/2026 | 27/07/2026 | 383627 |
| CVE-2026-43822 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 28/07/2026 | 383687 |
| CVE-2026-43821 | An access issue was addressed with improved access restrictions. This issue is fixed in Safari 2 ... | 27/07/2026 | 28/07/2026 | 383686 |
| CVE-2026-43819 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383698 |
| CVE-2026-43818 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26. ... | 27/07/2026 | 27/07/2026 | 383626 |
| CVE-2026-43817 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 ... | 27/07/2026 | 28/07/2026 | 383685 |
| CVE-2026-43816 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 27/07/2026 | 28/07/2026 | 383684 |
| CVE-2026-43814 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 28/07/2026 | 383683 |
| CVE-2026-43813 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26 ... | 27/07/2026 | 27/07/2026 | 383644 |
| CVE-2026-43812 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 28/07/2026 | 383682 |
| CVE-2026-43811 | A race condition was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS ... | 27/07/2026 | 28/07/2026 | 383697 |
| CVE-2026-43810 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 27/07/2026 | 383621 |
| CVE-2026-43809 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383681 |
| CVE-2026-43807 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.5.2 ... | 27/07/2026 | 28/07/2026 | 383680 |
| CVE-2026-43806 | A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in ... | 27/07/2026 | 28/07/2026 | 383696 |
| CVE-2026-43805 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and ... | 27/07/2026 | 27/07/2026 | 383643 |
| CVE-2026-43804 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6, ... | 27/07/2026 | 28/07/2026 | 383679 |
| CVE-2026-43803 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 27/07/2026 | 27/07/2026 | 383625 |
| CVE-2026-43802 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 27/07/2026 | 28/07/2026 | 383678 |
| CVE-2026-43801 | This issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, ... | 27/07/2026 | 28/07/2026 | 383677 |
| CVE-2026-43800 | An information disclosure issue was addressed by removing the vulnerable code. This issue is fix ... | 27/07/2026 | 27/07/2026 | 383642 |
| CVE-2026-43799 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 28/07/2026 | 383676 |
| CVE-2026-43797 | This issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, ... | 27/07/2026 | 28/07/2026 | 383695 |
| CVE-2026-43796 | This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPad ... | 27/07/2026 | 28/07/2026 | 383675 |
| CVE-2026-43793 | An issue existed in the handling of environment variables. This issue was addressed with improve ... | 27/07/2026 | 28/07/2026 | 383674 |
| CVE-2026-43792 | An authorization issue was addressed with improved state management. This issue is fixed in Safa ... | 27/07/2026 | 28/07/2026 | 383694 |
| CVE-2026-43782 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macO ... | 27/07/2026 | 28/07/2026 | 383693 |
| CVE-2026-43781 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoi ... | 27/07/2026 | 28/07/2026 | 383673 |
| CVE-2026-43780 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26. ... | 27/07/2026 | 28/07/2026 | 383672 |
| CVE-2026-43779 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15. ... | 27/07/2026 | 27/07/2026 | 383641 |
| CVE-2026-43778 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 27/07/2026 | 383640 |
| CVE-2026-43777 | This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15 ... | 27/07/2026 | 27/07/2026 | 383624 |
| CVE-2026-43776 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 a ... | 27/07/2026 | 27/07/2026 | 383639 |
| CVE-2026-43775 | An authorization issue was addressed with improved state management. This issue is fixed in macO ... | 27/07/2026 | 28/07/2026 | 383692 |
| CVE-2026-43774 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383671 |
| CVE-2026-43773 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS ... | 27/07/2026 | 27/07/2026 | 383623 |
| CVE-2026-43772 | A path traversal issue was addressed with improved input validation. This issue is fixed in macO ... | 27/07/2026 | 28/07/2026 | 383670 |
| CVE-2026-43771 | A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequ ... | 27/07/2026 | 28/07/2026 | 383669 |
| CVE-2026-43770 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia ... | 27/07/2026 | 28/07/2026 | 383668 |
| CVE-2026-43769 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26. ... | 27/07/2026 | 28/07/2026 | 383667 |
| CVE-2026-43768 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 28/07/2026 | 383666 |
| CVE-2026-43767 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 28/07/2026 | 383665 |
| CVE-2026-43766 | An authorization issue was addressed with improved state management. This issue is fixed in macO ... | 27/07/2026 | 28/07/2026 | 383664 |
| CVE-2026-43765 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoi ... | 27/07/2026 | 28/07/2026 | 383663 |
| CVE-2026-43764 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS S ... | 27/07/2026 | 28/07/2026 | 383662 |
| CVE-2026-43763 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383661 |
| CVE-2026-43760 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS So ... | 27/07/2026 | 28/07/2026 | 383691 |
| CVE-2026-43759 | An authorization issue was addressed with improved state management. This issue is fixed in macO ... | 27/07/2026 | 28/07/2026 | 383690 |
| CVE-2026-43758 | An authorization issue was addressed with improved state management. This issue is fixed in macO ... | 27/07/2026 | 28/07/2026 | 383660 |
| CVE-2026-43757 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383659 |
| CVE-2026-43756 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7. ... | 27/07/2026 | 28/07/2026 | 383658 |
| CVE-2026-43755 | A race condition was addressed with improved state management. This issue is fixed in macOS Sono ... | 27/07/2026 | 28/07/2026 | 383689 |
| CVE-2026-43754 | This issue was addressed with improved redaction of sensitive information. This issue is fixed i ... | 27/07/2026 | 27/07/2026 | 383638 |
| CVE-2026-43753 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 ... | 27/07/2026 | 28/07/2026 | 383657 |
| CVE-2026-43750 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequ ... | 27/07/2026 | 28/07/2026 | 383656 |
| CVE-2026-43749 | A parsing issue in the handling of directory paths was addressed with improved path validation. ... | 27/07/2026 | 27/07/2026 | 383637 |
| CVE-2026-43748 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 27/07/2026 | 28/07/2026 | 383655 |
| CVE-2026-43747 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS ... | 27/07/2026 | 28/07/2026 | 383654 |
| CVE-2026-43744 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 27/07/2026 | 27/07/2026 | 383631 |
| CVE-2026-43739 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in ... | 27/07/2026 | 28/07/2026 | 383653 |
| CVE-2026-43738 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383622 |
| CVE-2026-43733 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 27/07/2026 | 383630 |
| CVE-2026-43730 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 ... | 27/07/2026 | 28/07/2026 | 383652 |
| CVE-2026-43729 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 27/07/2026 | 383629 |
| CVE-2026-43728 | This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 2 ... | 27/07/2026 | 28/07/2026 | 383688 |
| CVE-2026-43723 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.6 an ... | 27/07/2026 | 27/07/2026 | 383636 |
| CVE-2026-43714 | The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iP ... | 27/07/2026 | 27/07/2026 | 383599 |
| CVE-2026-43711 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iO ... | 27/07/2026 | 27/07/2026 | 383598 |
| CVE-2026-43710 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383591 |
| CVE-2026-43698 | An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia ... | 27/07/2026 | 27/07/2026 | 383597 |
| CVE-2026-43694 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383596 |
| CVE-2026-43693 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoi ... | 27/07/2026 | 27/07/2026 | 383595 |
| CVE-2026-43682 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383590 |
| CVE-2026-43681 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequ ... | 27/07/2026 | 27/07/2026 | 383594 |
| CVE-2026-43673 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadO ... | 27/07/2026 | 27/07/2026 | 383593 |
| CVE-2026-43672 | An authorization issue was addressed with improved state management. This issue is fixed in macO ... | 27/07/2026 | 27/07/2026 | 383592 |
| CVE-2026-43665 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoi ... | 27/07/2026 | 27/07/2026 | 383588 |
| CVE-2026-39877 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in ma ... | 27/07/2026 | 27/07/2026 | 383589 |
| CVE-2026-39875 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Seq ... | 27/07/2026 | 27/07/2026 | 383584 |
| CVE-2026-39874 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Seq ... | 27/07/2026 | 27/07/2026 | 383583 |
| CVE-2026-39873 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383582 |
| CVE-2026-28982 | A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7. ... | 27/07/2026 | 27/07/2026 | 383580 |
| CVE-2026-28981 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequ ... | 27/07/2026 | 27/07/2026 | 383581 |
| CVE-2026-28973 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26. ... | 27/07/2026 | 27/07/2026 | 383587 |
| CVE-2026-28945 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in m ... | 27/07/2026 | 27/07/2026 | 383586 |
| CVE-2026-28932 | A logic issue existed resulting in memory corruption. This was addressed with improved state man ... | 27/07/2026 | 27/07/2026 | 383585 |
| CVE-2026-28931 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 a ... | 27/07/2026 | 27/07/2026 | 383571 |
| CVE-2026-28928 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS ... | 27/07/2026 | 27/07/2026 | 383575 |
| CVE-2026-28926 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoi ... | 27/07/2026 | 27/07/2026 | 383579 |
| CVE-2026-28912 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15. ... | 27/07/2026 | 27/07/2026 | 383577 |
| CVE-2026-28911 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. ... | 27/07/2026 | 27/07/2026 | 383578 |
| CVE-2026-28900 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequ ... | 27/07/2026 | 27/07/2026 | 383573 |
| CVE-2026-28896 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7 ... | 27/07/2026 | 27/07/2026 | 383570 |
| CVE-2026-28849 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS ... | 27/07/2026 | 27/07/2026 | 383576 |
| CVE-2026-20672 | An information disclosure issue was addressed with improved privacy controls. This issue is fixe ... | 27/07/2026 | 27/07/2026 | 383574 |
| CVE-2026-12001 | A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR84 ... | 27/07/2026 | 27/07/2026 | 383572 |
| CVE-2026-66018 | Build readers can access another repository's environment properties. A caller with read ac ... | 27/07/2026 | 27/07/2026 | 383566 |
| CVE-2026-66015 | An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under adm ... | 27/07/2026 | 27/07/2026 | 383562 |
| CVE-2026-66014 | JFrog Artifactory contains an authentication handling weakness in internal request processing th ... | 27/07/2026 | 27/07/2026 | 383565 |
| CVE-2026-65925 | A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request ... | 27/07/2026 | 27/07/2026 | 383568 |
| CVE-2026-65924 | JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Serve ... | 27/07/2026 | 27/07/2026 | 383567 |
| CVE-2026-65923 | A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, u ... | 27/07/2026 | 27/07/2026 | 383564 |
| CVE-2026-65922 | An authorization weakness in JFrog Artifactory internal metadata handling could allow a user wit ... | 27/07/2026 | 27/07/2026 | 383561 |
| CVE-2026-65921 | A path validation weakness in archive extraction/write handling allows entries with traversal se ... | 27/07/2026 | 27/07/2026 | 383569 |
| CVE-2026-65618 | Improper URL validation when handling specific URLs, allows an attacker, under certain condition ... | 27/07/2026 | 27/07/2026 | 383563 |
| CVE-2026-65617 | A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged us ... | 27/07/2026 | 27/07/2026 | 383556 |
| CVE-2026-65616 | Incorrect authorization validation in refresh token signature allows non-admin users to obtain a ... | 27/07/2026 | 27/07/2026 | 383560 |
| CVE-2026-64649 | Next.js is a React framework for building full-stack web applications. In versions 14.1.1 throug ... | 27/07/2026 | 27/07/2026 | 383557 |
| CVE-2026-64648 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 throug ... | 27/07/2026 | 27/07/2026 | 383555 |
| CVE-2026-59729 | Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to ... | 27/07/2026 | 27/07/2026 | 383347 |
| CVE-2026-59727 | Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, when a t ... | 27/07/2026 | 27/07/2026 | 383559 |
| CVE-2026-56748 | Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18 ... | 27/07/2026 | 27/07/2026 | 383553 |
| CVE-2026-56747 | Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream ... | 27/07/2026 | 27/07/2026 | 383552 |
| CVE-2026-42017 | An event-handling weakness in JFrog Artifactory could expose privileged authorization material t ... | 27/07/2026 | 27/07/2026 | 383558 |
| CVE-2026-42016 | JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalatio ... | 27/07/2026 | 27/07/2026 | 383554 |
| CVE-2026-66759 | A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS ... | 27/07/2026 | 27/07/2026 | 383548 |
| CVE-2026-66758 | A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin ... | 27/07/2026 | 27/07/2026 | 383549 |
| CVE-2026-66757 | A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, th ... | 27/07/2026 | 27/07/2026 | 383551 |
| CVE-2026-64647 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 throug ... | 27/07/2026 | 27/07/2026 | 383546 |
| CVE-2026-64646 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 throug ... | 27/07/2026 | 27/07/2026 | 383550 |
| CVE-2026-17612 | Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.2 ... | 27/07/2026 | 27/07/2026 | 383544 |
| CVE-2026-16481 | A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the clo ... | 27/07/2026 | 27/07/2026 | 383547 |
| CVE-2026-12383 | A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses p ... | 27/07/2026 | 27/07/2026 | 383545 |
| CVE-2026-66031 | Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerabi ... | 27/07/2026 | 27/07/2026 | 383542 |
| CVE-2026-51244 | schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in UnpackFrameHeader(). Mu ... | 27/07/2026 | 27/07/2026 | 383541 |
| CVE-2026-10683 | In the Synopsys DesignWare I2C driver (drivers/i2c/i2c_dw.c) operating in target/slave mode, the ... | 27/07/2026 | 27/07/2026 | 383543 |
| CVE-2026-10682 | The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/logging/ ... | 27/07/2026 | 27/07/2026 | 383540 |
| CVE-2026-66030 | Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerab ... | 27/07/2026 | 27/07/2026 | 383538 |
| CVE-2026-66029 | Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerabi ... | 27/07/2026 | 27/07/2026 | 383537 |
| CVE-2026-66028 | Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnera ... | 27/07/2026 | 27/07/2026 | 383532 |
| CVE-2026-64645 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 throug ... | 27/07/2026 | 27/07/2026 | 383536 |
| CVE-2026-64644 | Next.js is a React framework for building full-stack web applications. In versions 15.5.0 throug ... | 27/07/2026 | 27/07/2026 | 383531 |
| CVE-2026-64643 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 throug ... | 27/07/2026 | 27/07/2026 | 383533 |
| CVE-2026-64642 | Next.js is a React framework for building full-stack web applications. In versions 16.0.0 throug ... | 27/07/2026 | 27/07/2026 | 383539 |
| CVE-2026-64641 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 throug ... | 27/07/2026 | 27/07/2026 | 383535 |
| CVE-2026-59239 | Stored Cross-site Scripting (CWE-79) in the email module in Roskus Prospero Flow CRM before 5.4. ... | 27/07/2026 | 27/07/2026 | 383534 |
| CVE-2026-55579 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before v ... | 27/07/2026 | 27/07/2026 | 383521 |
| CVE-2026-55578 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before v ... | 27/07/2026 | 27/07/2026 | 383524 |
| CVE-2026-54540 | Pheditor is a single-file editor and file manager written in PHP. Prior to version 2.0.5, there ... | 27/07/2026 | 27/07/2026 | 383523 |
| CVE-2026-48052 | Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, an ... | 27/07/2026 | 27/07/2026 | 383529 |
| CVE-2026-48051 | Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Pap ... | 27/07/2026 | 27/07/2026 | 383530 |
| CVE-2026-48030 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before v ... | 27/07/2026 | 27/07/2026 | 383522 |
| CVE-2026-17570 | Improper access control in the PAM password history endpoints in Devolutions Server allows an au ... | 27/07/2026 | 27/07/2026 | 383526 |
| CVE-2026-17569 | Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated ... | 27/07/2026 | 27/07/2026 | 383528 |
| CVE-2026-17568 | Improper access control in the role membership management endpoint in Devolutions Server allows ... | 27/07/2026 | 27/07/2026 | 383527 |
| CVE-2026-17552 | Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalida ... | 27/07/2026 | 27/07/2026 | 383525 |
| CVE-2026-54272 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Vers ... | 27/07/2026 | 27/07/2026 | 383519 |
| CVE-2026-51235 | LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch() function (src/libraw_cxx.cpp) and ... | 27/07/2026 | 27/07/2026 | 383520 |
| CVE-2026-45623 | PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the ... | 27/07/2026 | 27/07/2026 | 383518 |
| CVE-2026-66731 | facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked ... | 27/07/2026 | 27/07/2026 | 383515 |
| CVE-2026-66730 | facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body pa ... | 27/07/2026 | 27/07/2026 | 383514 |
| CVE-2026-66729 | facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME b ... | 27/07/2026 | 27/07/2026 | 383513 |
| CVE-2026-66391 | Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket ... | 27/07/2026 | 27/07/2026 | 383510 |
| CVE-2026-66390 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') v ... | 27/07/2026 | 27/07/2026 | 383516 |
| CVE-2026-63077 | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possi ... | 27/07/2026 | 27/07/2026 | 383517 |
| CVE-2026-24252 | NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. ... | 27/07/2026 | 27/07/2026 | 383509 |
| CVE-2026-17531 | A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is so ... | 27/07/2026 | 27/07/2026 | 383396 |
| CVE-2026-17192 | A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made ... | 27/07/2026 | 27/07/2026 | 383512 |
| CVE-2026-17191 | An input validation vulnerability exists in an API component of the orchestrator. An authenticat ... | 27/07/2026 | 27/07/2026 | 383511 |
| CVE-2026-66399 | phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMe ... | 27/07/2026 | 27/07/2026 | 383486 |
| CVE-2026-66398 | phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API t ... | 27/07/2026 | 27/07/2026 | 383483 |
| CVE-2026-66397 | phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existing_image field dur ... | 27/07/2026 | 27/07/2026 | 383485 |
| CVE-2026-66396 | SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when renderin ... | 27/07/2026 | 27/07/2026 | 383490 |
| CVE-2026-66395 | SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the baza ... | 27/07/2026 | 27/07/2026 | 383491 |
| CVE-2026-66394 | SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG s ... | 27/07/2026 | 27/07/2026 | 383489 |
| CVE-2026-59251 | Allocation of resources without limits in Erlang/OTP public_key certificate path validation allo ... | 27/07/2026 | 27/07/2026 | 383484 |
| CVE-2026-54890 | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), er ... | 27/07/2026 | 27/07/2026 | 383488 |
| CVE-2026-17530 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulner ... | 27/07/2026 | 27/07/2026 | 383395 |
| CVE-2026-16812 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote at ... | 27/07/2026 | 27/07/2026 | 383487 |
| CVE-2026-59250 | Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthent ... | 27/07/2026 | 27/07/2026 | 383478 |
| CVE-2026-58227 | The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer cer ... | 27/07/2026 | 27/07/2026 | 383508 |
| CVE-2026-55953 | The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite s ... | 27/07/2026 | 27/07/2026 | 383480 |
| CVE-2026-55737 | Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts all ... | 27/07/2026 | 27/07/2026 | 383474 |
| CVE-2026-51304 | sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The ... | 27/07/2026 | 27/07/2026 | 383477 |
| CVE-2026-51303 | A use-after-free (UAF) vulnerability was discovered in the core parsing component of SQLite 3.41 ... | 27/07/2026 | 27/07/2026 | 383476 |
| CVE-2026-51302 | SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sq ... | 27/07/2026 | 27/07/2026 | 383475 |
| CVE-2026-51300 | A use-after-free vulnerability exists in the expression parsing and memory management logic of S ... | 27/07/2026 | 27/07/2026 | 383479 |
| CVE-2026-66477 | Unauthenticated Broken Access Control in Gillion = 4.13 versions. | 27/07/2026 | 27/07/2026 | 383503 |
| CVE-2026-66476 | Administrator Arbitrary File Deletion in Easy Digital Downloads = 3.6.9 versions. | 27/07/2026 | 27/07/2026 | 383502 |
| CVE-2026-66475 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce Checkout Mana ... | 27/07/2026 | 27/07/2026 | 383504 |
| CVE-2026-66474 | Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code HT Script ... | 27/07/2026 | 27/07/2026 | 383507 |
| CVE-2026-66448 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks = 1.3.3 versions. | 27/07/2026 | 27/07/2026 | 383506 |
| CVE-2026-66445 | Contributor Cross Site Scripting (XSS) in Open User Map = 1.4.46 versions. | 27/07/2026 | 27/07/2026 | 383505 |
| CVE-2026-66442 | Subscriber Broken Access Control in YayPricing = 3.5.6 versions. | 27/07/2026 | 27/07/2026 | 383497 |
| CVE-2026-66438 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions. | 27/07/2026 | 27/07/2026 | 383496 |
| CVE-2026-66437 | Contributor Server Side Request Forgery (SSRF) in Feedzy = 5.2.4 versions. | 27/07/2026 | 27/07/2026 | 383498 |
| CVE-2026-66434 | Contributor Cross Site Scripting (XSS) in Photonic Gallery Lightbox for Flickr, SmugMug Othe ... | 27/07/2026 | 27/07/2026 | 383501 |
| CVE-2026-66433 | Contributor Cross Site Scripting (XSS) in Location Weather = 3.0.6 versions. | 27/07/2026 | 27/07/2026 | 383500 |
| CVE-2026-66428 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider = 18.4 versions. | 27/07/2026 | 27/07/2026 | 383499 |
| CVE-2026-66427 | Administrator SQL Injection in WP Google Review Slider = 18.4 versions. | 27/07/2026 | 27/07/2026 | 383493 |
| CVE-2026-66050 | NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfe ... | 27/07/2026 | 27/07/2026 | 383492 |
| CVE-2026-65568 | Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions. | 27/07/2026 | 27/07/2026 | 383495 |
| CVE-2026-65567 | Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions. | 27/07/2026 | 27/07/2026 | 383494 |
| CVE-2026-65564 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions. | 27/07/2026 | 27/07/2026 | 383481 |
| CVE-2026-65563 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle = 3.0.7 versions. | 27/07/2026 | 27/07/2026 | 383482 |
| CVE-2026-51298 | sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing Jso ... | 27/07/2026 | 27/07/2026 | 383473 |
| CVE-2026-51297 | sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can ... | 27/07/2026 | 27/07/2026 | 383468 |
| CVE-2026-51296 | SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The pars ... | 27/07/2026 | 27/07/2026 | 383471 |
| CVE-2026-47078 | Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files out ... | 27/07/2026 | 27/07/2026 | 383472 |
| CVE-2026-42792 | Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an un ... | 27/07/2026 | 27/07/2026 | 383466 |
| CVE-2026-17574 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containin ... | 27/07/2026 | 27/07/2026 | 383470 |
| CVE-2026-17573 | A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file c ... | 27/07/2026 | 27/07/2026 | 383467 |
| CVE-2026-17572 | Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on ... | 27/07/2026 | 27/07/2026 | 383469 |
| CVE-2026-17529 | A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown funct ... | 27/07/2026 | 27/07/2026 | 383394 |
| CVE-2026-65562 | Contributor Cross Site Scripting (XSS) in BetterDocs = 4.6.2 versions. | 27/07/2026 | 27/07/2026 | 383464 |
| CVE-2026-65561 | Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register = 7.8.0 versions. | 27/07/2026 | 27/07/2026 | 383460 |
| CVE-2026-65558 | Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX = 2.3.5 versions. | 27/07/2026 | 27/07/2026 | 383461 |
| CVE-2026-65557 | Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce = 6.8.0 versions. | 27/07/2026 | 27/07/2026 | 383462 |
| CVE-2026-65436 | Editor Arbitrary File Deletion in Kirki = 6.0.13 versions. | 27/07/2026 | 27/07/2026 | 383459 |
| CVE-2026-65435 | Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions. | 27/07/2026 | 27/07/2026 | 383458 |
| CVE-2026-65434 | Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions. | 27/07/2026 | 27/07/2026 | 383455 |
| CVE-2026-65433 | Subscriber Broken Access Control in RT Mega Menu Mega Menu Builder for Elementor Gutenberg ... | 27/07/2026 | 27/07/2026 | 383457 |
| CVE-2026-59560 | Subscriber Broken Access Control in FundEngine = 1.7.8 versions. | 27/07/2026 | 27/07/2026 | 383456 |
| CVE-2026-59559 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu Mega Menu Builder for Elementor Gutenb ... | 27/07/2026 | 27/07/2026 | 383463 |
| CVE-2026-59558 | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar = 11.4.2 versions. | 27/07/2026 | 27/07/2026 | 383454 |
| CVE-2026-59557 | Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions. | 27/07/2026 | 27/07/2026 | 383450 |
| CVE-2026-59556 | Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerc ... | 27/07/2026 | 27/07/2026 | 383452 |
| CVE-2026-59553 | Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager = 7.6.1 versions. | 27/07/2026 | 27/07/2026 | 383453 |
| CVE-2026-59552 | Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer Embedder = 1.4.2 ... | 27/07/2026 | 27/07/2026 | 383451 |
| CVE-2026-59551 | Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions. | 27/07/2026 | 27/07/2026 | 383446 |
| CVE-2026-59550 | Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions. | 27/07/2026 | 27/07/2026 | 383449 |
| CVE-2026-59549 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions. | 27/07/2026 | 27/07/2026 | 383445 |
| CVE-2026-59548 | Unauthenticated Sensitive Data Exposure in Byteflows Travel Hotel Booking = 1.0.0 versions. | 27/07/2026 | 27/07/2026 | 383448 |
| CVE-2026-59546 | Subscriber Broken Authentication in Hide My WP Ghost = 7.0.06 versions. | 27/07/2026 | 27/07/2026 | 383447 |
| CVE-2026-59539 | Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions = 3.0.7 versions. | 27/07/2026 | 27/07/2026 | 383444 |
| CVE-2026-59538 | Unauthenticated SQL Injection in GamiPress = 7.9.7 versions. | 27/07/2026 | 27/07/2026 | 383443 |
| CVE-2026-59537 | Administrator SQL Injection in Sender Newsletter, SMS and Email Marketing Automation for WooCo ... | 27/07/2026 | 27/07/2026 | 383437 |
| CVE-2026-59536 | Unauthenticated Broken Access Control in CoCart Headless ecommerce = 4.8.4 versions. | 27/07/2026 | 27/07/2026 | 383436 |
| CVE-2026-59535 | Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions. | 27/07/2026 | 27/07/2026 | 383442 |
| CVE-2026-59534 | Unauthenticated Broken Access Control in Post My CF7 Form = 6.2.0 versions. | 27/07/2026 | 27/07/2026 | 383441 |
| CVE-2026-59533 | Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions. | 27/07/2026 | 27/07/2026 | 383440 |
| CVE-2026-59532 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager = 2.7.2 versions. | 27/07/2026 | 27/07/2026 | 383439 |
| CVE-2026-59531 | Unauthenticated Unknown in Falcon WordPress Optimizations Tweaks = 2.10.0 versions. | 27/07/2026 | 27/07/2026 | 383435 |
| CVE-2026-59530 | Unauthenticated Broken Access Control in Stripe For WooCommerce = 4.0.7 versions. | 27/07/2026 | 27/07/2026 | 383438 |
| CVE-2026-59529 | Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions. | 27/07/2026 | 27/07/2026 | 383434 |
| CVE-2026-59528 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions. | 27/07/2026 | 27/07/2026 | 383432 |
| CVE-2026-59527 | Unauthenticated SQL Injection in MapSVG = 8.14.0 versions. | 27/07/2026 | 27/07/2026 | 383433 |
| CVE-2026-10819 | Mattermost versions 11.6.x = 11.6.5, 10.11.x = 10.11.20, 11.8.x = 11.8.1, 11.7.x = 11.7.4 fa ... | 27/07/2026 | 27/07/2026 | 383425 |
| CVE-2026-10600 | Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fa ... | 27/07/2026 | 27/07/2026 | 383427 |
| CVE-2026-65879 | Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide sec ... | 27/07/2026 | 27/07/2026 | 383424 |
| CVE-2026-65878 | Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder 6.7 ... | 27/07/2026 | 27/07/2026 | 383423 |
| CVE-2026-65877 | Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder 6.7.1 - Im ... | 27/07/2026 | 27/07/2026 | 383422 |
| CVE-2026-65876 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder 6.7.1 - ... | 27/07/2026 | 27/07/2026 | 383421 |
| CVE-2026-65766 | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder 6.7.1 - ... | 27/07/2026 | 27/07/2026 | 383420 |
| CVE-2026-61511 | vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in th ... | 27/07/2026 | 27/07/2026 | 383418 |
| CVE-2026-17514 | A vulnerability was determined in ZJONSSON node-unzipper up to 0.12.3. Affected by this vulnerab ... | 27/07/2026 | 27/07/2026 | 383384 |
| CVE-2026-17513 | A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_ ... | 27/07/2026 | 27/07/2026 | 383383 |
| CVE-2026-15003 | A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffe ... | 27/07/2026 | 27/07/2026 | 383419 |
| CVE-2026-59690 | A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, O ... | 27/07/2026 | 27/07/2026 | 383417 |
| CVE-2026-59689 | An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager ... | 27/07/2026 | 27/07/2026 | 383413 |
| CVE-2026-59688 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, O ... | 27/07/2026 | 27/07/2026 | 383412 |
| CVE-2026-59687 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, O ... | 27/07/2026 | 27/07/2026 | 383411 |
| CVE-2026-59686 | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, O ... | 27/07/2026 | 27/07/2026 | 383410 |
| CVE-2026-56538 | An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios thi ... | 27/07/2026 | 27/07/2026 | 383416 |
| CVE-2026-56537 | HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensi ... | 27/07/2026 | 27/07/2026 | 383409 |
| CVE-2026-17512 | A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_m ... | 27/07/2026 | 27/07/2026 | 383382 |
| CVE-2026-12991 | The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications ... | 27/07/2026 | 27/07/2026 | 383415 |
| CVE-2026-12990 | An access control vulnerability in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 6 ... | 27/07/2026 | 27/07/2026 | 383414 |
| CVE-2026-12989 | A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot ... | 27/07/2026 | 27/07/2026 | 383408 |
| CVE-2026-66053 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bind ... | 27/07/2026 | 27/07/2026 | 383343 |
| CVE-2026-58662 | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache T ... | 27/07/2026 | 27/07/2026 | 383342 |
| CVE-2026-58389 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust binding ... | 27/07/2026 | 27/07/2026 | 383341 |
| CVE-2026-58023 | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thr ... | 27/07/2026 | 27/07/2026 | 383340 |
| CVE-2026-57917 | proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enablin ... | 27/07/2026 | 27/07/2026 | 383407 |
| CVE-2026-57916 | proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An ... | 27/07/2026 | 27/07/2026 | 383406 |
| CVE-2026-55971 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apach ... | 27/07/2026 | 27/07/2026 | 383339 |
| CVE-2026-55970 | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: ... | 27/07/2026 | 27/07/2026 | 383338 |
| CVE-2026-55969 | Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi an ... | 27/07/2026 | 27/07/2026 | 383337 |
| CVE-2026-55968 | Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnera ... | 27/07/2026 | 27/07/2026 | 383336 |
| CVE-2026-49158 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift ... | 27/07/2026 | 27/07/2026 | 383335 |
| CVE-2026-48586 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift ... | 27/07/2026 | 27/07/2026 | 383334 |
| CVE-2026-48145 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ binding ... | 27/07/2026 | 27/07/2026 | 383333 |
| CVE-2026-48144 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bind ... | 27/07/2026 | 27/07/2026 | 383332 |
| CVE-2026-45112 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java binding ... | 27/07/2026 | 27/07/2026 | 383331 |
| CVE-2026-43871 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift ... | 27/07/2026 | 27/07/2026 | 383329 |
| CVE-2026-41608 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift ... | 27/07/2026 | 27/07/2026 | 383330 |
| CVE-2026-14856 | A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media ... | 27/07/2026 | 27/07/2026 | 383405 |
| CVE-2026-12495 | Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt fu ... | 27/07/2026 | 27/07/2026 | 383404 |
| CVE-2026-40000 | The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is de ... | 27/07/2026 | 27/07/2026 | 383403 |
| CVE-2026-17534 | Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static ... | 27/07/2026 | 27/07/2026 | 383401 |
| CVE-2026-17527 | In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended ... | 27/07/2026 | 27/07/2026 | 383400 |
| CVE-2026-17523 | A flaw was found in the kernel. An unprivileged local user can exploit this vulnerability to exe ... | 27/07/2026 | 27/07/2026 | 383402 |
| CVE-2026-11310 | X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_ ... | 27/07/2026 | 27/07/2026 | 374029 |
| CVE-2026-10592 | Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A c ... | 27/07/2026 | 27/07/2026 | 374043 |
| CVE-2026-10512 | The X25519 x86_64 assembly implementation fails to clear the most significant bit during the fin ... | 27/07/2026 | 27/07/2026 | 374036 |
| CVE-2026-10098 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status allows a same-issuer ... | 27/07/2026 | 27/07/2026 | 374067 |
| CVE-2026-10097 | wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1 ... | 27/07/2026 | 27/07/2026 | 374033 |
| CVE-2026-65765 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Impr ... | 27/07/2026 | 27/07/2026 | 383398 |
| CVE-2026-65764 | Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Impro ... | 27/07/2026 | 27/07/2026 | 383399 |
| CVE-2026-16554 | cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c ... | 27/07/2026 | 27/07/2026 | 383397 |
| CVE-2026-15799 | duplicate | 27/07/2026 | 27/07/2026 | |
| CVE-2026-65894 | This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP end ... | 27/07/2026 | 27/07/2026 | 383391 |
| CVE-2026-65893 | This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled i ... | 27/07/2026 | 27/07/2026 | 383393 |
| CVE-2026-64536 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ... | 27/07/2026 | 27/07/2026 | 383390 |
| CVE-2026-64535 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF ... | 27/07/2026 | 27/07/2026 | 383389 |
| CVE-2026-64534 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED ... | 27/07/2026 | 27/07/2026 | 383388 |
| CVE-2026-64533 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_foll ... | 27/07/2026 | 27/07/2026 | 383387 |
| CVE-2026-64532 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view ... | 27/07/2026 | 27/07/2026 | 383386 |
| CVE-2026-64531 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject ove ... | 27/07/2026 | 27/07/2026 | 383385 |
| CVE-2026-14837 | Multiple Lenze products are affected by an improper signature verification vulnerability in the ... | 27/07/2026 | 27/07/2026 | 383392 |
| CVE-2026-9830 | The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke ... | 27/07/2026 | 27/07/2026 | 383380 |
| CVE-2026-66412 | Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticate ... | 27/07/2026 | 27/07/2026 | 383381 |
| CVE-2026-14827 | The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field ... | 27/07/2026 | 27/07/2026 | 383379 |
| CVE-2026-14820 | The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limitin ... | 27/07/2026 | 27/07/2026 | 383378 |
| CVE-2026-14568 | The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership ... | 27/07/2026 | 27/07/2026 | 383376 |
| CVE-2026-14289 | The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate ... | 27/07/2026 | 27/07/2026 | 383369 |
| CVE-2026-14236 | The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied re ... | 27/07/2026 | 27/07/2026 | 383375 |
| CVE-2026-14235 | The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token t ... | 27/07/2026 | 27/07/2026 | 383374 |
| CVE-2026-14203 | The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before r ... | 27/07/2026 | 27/07/2026 | 383373 |
| CVE-2026-14190 | The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstr ... | 27/07/2026 | 27/07/2026 | 383372 |
| CVE-2026-14189 | The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identi ... | 27/07/2026 | 27/07/2026 | 383371 |
| CVE-2026-13726 | The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflectin ... | 27/07/2026 | 27/07/2026 | 383377 |
| CVE-2026-13714 | The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validat ... | 27/07/2026 | 27/07/2026 | 383368 |
| CVE-2026-13597 | The 微信二维码登陆 WordPress plugin through 1.3 does not properly validate WeChat webhook ... | 27/07/2026 | 27/07/2026 | 383370 |
| CVE-2026-13400 | Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all ... | 27/07/2026 | 27/07/2026 | 383367 |
| CVE-2026-13390 | The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on ... | 27/07/2026 | 27/07/2026 | 383364 |
| CVE-2026-13332 | The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an u ... | 27/07/2026 | 27/07/2026 | 383360 |
| CVE-2026-13152 | The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prev ... | 27/07/2026 | 27/07/2026 | 383359 |
| CVE-2026-12982 | The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user in ... | 27/07/2026 | 27/07/2026 | 383366 |
| CVE-2026-12493 | The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not ver ... | 27/07/2026 | 27/07/2026 | 383358 |
| CVE-2026-12394 | The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end ... | 27/07/2026 | 27/07/2026 | 383363 |
| CVE-2026-12255 | The MainWP Child WordPress plugin before 6.1.2 does not verify the requester's identity in ... | 27/07/2026 | 27/07/2026 | 383362 |
| CVE-2026-10082 | The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parame ... | 27/07/2026 | 27/07/2026 | 383361 |
| CVE-2026-15928 | XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scriptin ... | 27/07/2026 | 27/07/2026 | 383357 |
| CVE-2026-17501 | A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function tra ... | 27/07/2026 | 27/07/2026 | 383354 |
| CVE-2026-17500 | A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _v ... | 27/07/2026 | 27/07/2026 | 383353 |
| CVE-2026-12340 | Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certif ... | 27/07/2026 | 27/07/2026 | 374041 |
| CVE-2026-11999 | X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifi ... | 27/07/2026 | 27/07/2026 | 373970 |
| CVE-2026-11703 | Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the bindi ... | 27/07/2026 | 27/07/2026 | 374080 |
| CVE-2026-12080 | A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerab ... | 27/07/2026 | 27/07/2026 | 380603 |
| CVE-2026-57990 | Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an ... | 26/07/2026 | 26/07/2026 | 383356 |
| CVE-2026-57989 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to di ... | 26/07/2026 | 26/07/2026 | 383355 |
| CVE-2026-36189 | Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc ... | 26/07/2026 | 26/07/2026 | 365032 |
| CVE-2026-14899 | The code to parse MIME headers for display when forwarding a message (if the setting to view all ... | 26/07/2026 | 26/07/2026 | 382448 |
| CVE-2026-59674 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package a ... | 26/07/2026 | 26/07/2026 | 378264 |
| CVE-2026-59677 | A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a\u00a0user t ... | 26/07/2026 | 26/07/2026 | 382481 |
| CVE-2026-59676 | A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policy ... | 26/07/2026 | 26/07/2026 | 382476 |
| CVE-2026-12590 | Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser ... | 26/07/2026 | 26/07/2026 | 377179 |
| CVE-2026-12547 | SoupAuthManager caches proxy authentication credentials without scoping them to the proxy author ... | 26/07/2026 | 26/07/2026 | 381016 |
| CVE-2026-12484 | A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-con ... | 26/07/2026 | 26/07/2026 | 380531 |
| CVE-2026-12482 | A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar a ... | 26/07/2026 | 26/07/2026 | 378257 |
| CVE-2026-12681 | Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go- ... | 26/07/2026 | 26/07/2026 | 373107 |
| CVE-2026-57978 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pe ... | 26/07/2026 | 26/07/2026 | 383352 |
| CVE-2026-17497 | NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, pyt ... | 26/07/2026 | 26/07/2026 | 383326 |
| CVE-2026-17496 | NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and i ... | 26/07/2026 | 26/07/2026 | 383327 |
| CVE-2026-17459 | A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the fu ... | 26/07/2026 | 26/07/2026 | 383321 |
| CVE-2026-17458 | A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickVia ... | 26/07/2026 | 26/07/2026 | 383320 |
| CVE-2026-17457 | A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the ... | 26/07/2026 | 26/07/2026 | 383319 |
| CVE-2026-64530 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle T ... | 26/07/2026 | 26/07/2026 | 383324 |
| CVE-2026-63720 | datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that al ... | 26/07/2026 | 26/07/2026 | 383323 |
| CVE-2026-17434 | A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpSe ... | 26/07/2026 | 26/07/2026 | 383075 |
| CVE-2026-17433 | A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function create ... | 26/07/2026 | 26/07/2026 | 383074 |
| CVE-2026-15962 | The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in a ... | 26/07/2026 | 26/07/2026 | 383322 |
| CVE-2026-17432 | A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerabili ... | 26/07/2026 | 26/07/2026 | 383065 |
| CVE-2026-64522 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode ... | 25/07/2026 | 25/07/2026 | 383317 |
| CVE-2026-64521 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: ... | 25/07/2026 | 25/07/2026 | 383316 |
| CVE-2026-64520 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PAR ... | 25/07/2026 | 25/07/2026 | 383314 |
| CVE-2026-64519 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in l ... | 25/07/2026 | 25/07/2026 | 383315 |
| CVE-2026-64518 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds acces ... | 25/07/2026 | 25/07/2026 | 383306 |
| CVE-2026-64517 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free ... | 25/07/2026 | 25/07/2026 | 383305 |
| CVE-2026-64516 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 f ... | 25/07/2026 | 25/07/2026 | 383304 |
| CVE-2026-64515 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defr ... | 25/07/2026 | 25/07/2026 | 383303 |
| CVE-2026-64514 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: gate must_wait ... | 25/07/2026 | 25/07/2026 | 383313 |
| CVE-2026-64513 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally re ... | 25/07/2026 | 25/07/2026 | 383296 |
| CVE-2026-64512 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN w ... | 25/07/2026 | 25/07/2026 | 383294 |
| CVE-2026-64511 | In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possib ... | 25/07/2026 | 25/07/2026 | 383302 |
| CVE-2026-64510 | In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_n ... | 25/07/2026 | 25/07/2026 | 383312 |
| CVE-2026-64509 | In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cle ... | 25/07/2026 | 25/07/2026 | 383311 |
| CVE-2026-64508 | In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening a ... | 25/07/2026 | 25/07/2026 | 383301 |
| CVE-2026-64507 | In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush ... | 25/07/2026 | 25/07/2026 | 383300 |
| CVE-2026-64506 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop lo ... | 25/07/2026 | 25/07/2026 | 383295 |
| CVE-2026-64505 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis ... | 25/07/2026 | 25/07/2026 | 383310 |
| CVE-2026-64504 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp th ... | 25/07/2026 | 25/07/2026 | 383299 |
| CVE-2026-64503 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runti ... | 25/07/2026 | 25/07/2026 | 383309 |
| CVE-2026-64502 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fi ... | 25/07/2026 | 25/07/2026 | 383308 |
| CVE-2026-64501 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fi ... | 25/07/2026 | 25/07/2026 | 383318 |
| CVE-2026-64500 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initializ ... | 25/07/2026 | 25/07/2026 | 383298 |
| CVE-2026-64499 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM ... | 25/07/2026 | 25/07/2026 | 383307 |
| CVE-2026-64498 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fr ... | 25/07/2026 | 25/07/2026 | 383297 |
| CVE-2026-64497 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanu ... | 25/07/2026 | 25/07/2026 | 383293 |
| CVE-2026-64496 | In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO r ... | 25/07/2026 | 25/07/2026 | 383292 |
| CVE-2026-64495 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out ... | 25/07/2026 | 25/07/2026 | 383291 |
| CVE-2026-64494 | In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix ru ... | 25/07/2026 | 25/07/2026 | 383289 |
| CVE-2026-64493 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix r ... | 25/07/2026 | 25/07/2026 | 383290 |
| CVE-2026-64492 | In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: us ... | 25/07/2026 | 25/07/2026 | 383287 |
| CVE-2026-64491 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix ... | 25/07/2026 | 25/07/2026 | 383281 |
| CVE-2026-64490 | In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate contr ... | 25/07/2026 | 25/07/2026 | 383284 |
| CVE-2026-64489 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_ ... | 25/07/2026 | 25/07/2026 | 383288 |
| CVE-2026-64488 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check snd_ctl_new ... | 25/07/2026 | 25/07/2026 | 383285 |
| CVE-2026-64487 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix out-of-boun ... | 25/07/2026 | 25/07/2026 | 383286 |
| CVE-2026-64486 | In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_ ... | 25/07/2026 | 25/07/2026 | 383283 |
| CVE-2026-64485 | In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task cre ... | 25/07/2026 | 25/07/2026 | 383282 |
| CVE-2026-64484 | In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_ ... | 25/07/2026 | 25/07/2026 | 383277 |
| CVE-2026-64483 | In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: boun ... | 25/07/2026 | 25/07/2026 | 383242 |
| CVE-2026-64482 | In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd_ctl_new ... | 25/07/2026 | 25/07/2026 | 383275 |
| CVE-2026-64481 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmw ... | 25/07/2026 | 25/07/2026 | 383276 |
| CVE-2026-64480 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl ... | 25/07/2026 | 25/07/2026 | 383274 |
| CVE-2026-64479 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised ... | 25/07/2026 | 25/07/2026 | 383273 |
| CVE-2026-64478 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobje ... | 25/07/2026 | 25/07/2026 | 383279 |
| CVE-2026-64477 | In the Linux kernel, the following vulnerability has been resolved: x86,fs/resctrl: Prevent out- ... | 25/07/2026 | 25/07/2026 | 383278 |
| CVE-2026-64476 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle ... | 25/07/2026 | 25/07/2026 | 383254 |
| CVE-2026-64475 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA ar ... | 25/07/2026 | 25/07/2026 | 383263 |
| CVE-2026-64474 | In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop ... | 25/07/2026 | 25/07/2026 | 383272 |
| CVE-2026-64473 | In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs ... | 25/07/2026 | 25/07/2026 | 383262 |
| CVE-2026-64472 | In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfield ... | 25/07/2026 | 25/07/2026 | 383261 |
| CVE-2026-64471 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-af ... | 25/07/2026 | 25/07/2026 | 383252 |
| CVE-2026-64470 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-af ... | 25/07/2026 | 25/07/2026 | 383251 |
| CVE-2026-64469 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_th ... | 25/07/2026 | 25/07/2026 | 383271 |
| CVE-2026-64468 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_fr ... | 25/07/2026 | 25/07/2026 | 383270 |
| CVE-2026-64467 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 strid ... | 25/07/2026 | 25/07/2026 | 383269 |
| CVE-2026-64466 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: clear freeze li ... | 25/07/2026 | 25/07/2026 | 383260 |
| CVE-2026-64465 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atom ... | 25/07/2026 | 25/07/2026 | 383245 |
| CVE-2026-64464 | In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg ... | 25/07/2026 | 25/07/2026 | 383268 |
| CVE-2026-64463 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: u ... | 25/07/2026 | 25/07/2026 | 383267 |
| CVE-2026-64462 | In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource le ... | 25/07/2026 | 25/07/2026 | 383249 |
| CVE-2026-64461 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domai ... | 25/07/2026 | 25/07/2026 | 383266 |
| CVE-2026-64460 | In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable B ... | 25/07/2026 | 25/07/2026 | 383259 |
| CVE-2026-64459 | In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace perio ... | 25/07/2026 | 25/07/2026 | 383247 |
| CVE-2026-64458 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle ... | 25/07/2026 | 25/07/2026 | 383250 |
| CVE-2026-64457 | In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info poin ... | 25/07/2026 | 25/07/2026 | 383258 |
| CVE-2026-64456 | In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device- ... | 25/07/2026 | 25/07/2026 | 383246 |
| CVE-2026-64455 | In the Linux kernel, the following vulnerability has been resolved: USB: chaoskey: Fix slab-use- ... | 25/07/2026 | 25/07/2026 | 383244 |
| CVE-2026-64454 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget discon ... | 25/07/2026 | 25/07/2026 | 383257 |
| CVE-2026-64453 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: fix discon ... | 25/07/2026 | 25/07/2026 | 383243 |
| CVE-2026-64452 | In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-a ... | 25/07/2026 | 25/07/2026 | 383265 |
| CVE-2026-64451 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer de ... | 25/07/2026 | 25/07/2026 | 383256 |
| CVE-2026-64450 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read ... | 25/07/2026 | 25/07/2026 | 383255 |
| CVE-2026-64449 | In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: bound sla ... | 25/07/2026 | 25/07/2026 | 383253 |
| CVE-2026-64448 | In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implie ... | 25/07/2026 | 25/07/2026 | 383248 |
| CVE-2026-64447 | In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix do ... | 25/07/2026 | 25/07/2026 | 383264 |
| CVE-2026-64446 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap ... | 25/07/2026 | 25/07/2026 | 383280 |
| CVE-2026-64445 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP ... | 25/07/2026 | 25/07/2026 | 383239 |
| CVE-2026-64444 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ... | 25/07/2026 | 25/07/2026 | 383238 |
| CVE-2026-64443 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ... | 25/07/2026 | 25/07/2026 | 383237 |
| CVE-2026-64442 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ... | 25/07/2026 | 25/07/2026 | 383236 |
| CVE-2026-64441 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ... | 25/07/2026 | 25/07/2026 | 383235 |
| CVE-2026-64440 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ... | 25/07/2026 | 25/07/2026 | 383201 |
| CVE-2026-64439 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out as ... | 25/07/2026 | 25/07/2026 | 383234 |
| CVE-2026-64438 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work ... | 25/07/2026 | 25/07/2026 | 383241 |
| CVE-2026-64437 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of ... | 25/07/2026 | 25/07/2026 | 383190 |
| CVE-2026-64436 | In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_ ... | 25/07/2026 | 25/07/2026 | 383233 |
| CVE-2026-64435 | In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb ... | 25/07/2026 | 25/07/2026 | 383232 |
| CVE-2026-64434 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix UAF in ... | 25/07/2026 | 25/07/2026 | 383181 |
| CVE-2026-64433 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of ... | 25/07/2026 | 25/07/2026 | 383231 |
| CVE-2026-64432 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Pag ... | 25/07/2026 | 25/07/2026 | 383183 |
| CVE-2026-64431 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling post_wri ... | 25/07/2026 | 25/07/2026 | 383230 |
| CVE-2026-64430 | In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_ ... | 25/07/2026 | 25/07/2026 | 383229 |
| CVE-2026-64429 | In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spin ... | 25/07/2026 | 25/07/2026 | 383200 |
| CVE-2026-64428 | In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_ ... | 25/07/2026 | 25/07/2026 | 383199 |
| CVE-2026-64427 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfie ... | 25/07/2026 | 25/07/2026 | 383198 |
| CVE-2026-64426 | In the Linux kernel, the following vulnerability has been resolved: io_uring/nop: fix file refer ... | 25/07/2026 | 25/07/2026 | 383197 |
| CVE-2026-64425 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: re-check IO_ ... | 25/07/2026 | 25/07/2026 | 383196 |
| CVE-2026-64424 | In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-fre ... | 25/07/2026 | 25/07/2026 | 383228 |
| CVE-2026-64423 | In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast ... | 25/07/2026 | 25/07/2026 | 383226 |
| CVE-2026-64422 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reorder ... | 25/07/2026 | 25/07/2026 | 383227 |
| CVE-2026-64421 | In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix us ... | 25/07/2026 | 25/07/2026 | 383224 |
| CVE-2026-64420 | In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_ ... | 25/07/2026 | 25/07/2026 | 383182 |
| CVE-2026-64419 | In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU ... | 25/07/2026 | 25/07/2026 | 383225 |
| CVE-2026-64418 | In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_i ... | 25/07/2026 | 25/07/2026 | 383223 |
| CVE-2026-64417 | In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL point ... | 25/07/2026 | 25/07/2026 | 383185 |
| CVE-2026-64416 | In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL de ... | 25/07/2026 | 25/07/2026 | 383189 |
| CVE-2026-64415 | In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() ... | 25/07/2026 | 25/07/2026 | 383195 |
| CVE-2026-64414 | In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable ... | 25/07/2026 | 25/07/2026 | 383222 |
| CVE-2026-64413 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero ch ... | 25/07/2026 | 25/07/2026 | 383221 |
| CVE-2026-64412 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module ... | 25/07/2026 | 25/07/2026 | 383220 |
| CVE-2026-64411 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: termina ... | 25/07/2026 | 25/07/2026 | 383219 |
| CVE-2026-64410 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP t ... | 25/07/2026 | 25/07/2026 | 383218 |
| CVE-2026-64409 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix in ... | 25/07/2026 | 25/07/2026 | 383194 |
| CVE-2026-64408 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP c ... | 25/07/2026 | 25/07/2026 | 383216 |
| CVE-2026-64407 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix ou ... | 25/07/2026 | 25/07/2026 | 383217 |
| CVE-2026-64406 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in bt_acc ... | 25/07/2026 | 25/07/2026 | 383214 |
| CVE-2026-64405 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix nul ... | 25/07/2026 | 25/07/2026 | 383215 |
| CVE-2026-64404 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL d ... | 25/07/2026 | 25/07/2026 | 383184 |
| CVE-2026-64403 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate o ... | 25/07/2026 | 25/07/2026 | 383193 |
| CVE-2026-64402 | In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix ... | 25/07/2026 | 25/07/2026 | 383213 |
| CVE-2026-64401 | In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tco ... | 25/07/2026 | 25/07/2026 | 383212 |
| CVE-2026-64400 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversa ... | 25/07/2026 | 25/07/2026 | 383188 |
| CVE-2026-64399 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks ... | 25/07/2026 | 25/07/2026 | 383211 |
| CVE-2026-64398 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission chec ... | 25/07/2026 | 25/07/2026 | 383192 |
| CVE-2026-64397 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIREC ... | 25/07/2026 | 25/07/2026 | 383210 |
| CVE-2026-64396 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct fil ... | 25/07/2026 | 25/07/2026 | 383209 |
| CVE-2026-64395 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read a ... | 25/07/2026 | 25/07/2026 | 383187 |
| CVE-2026-64394 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITE_DAC/WRITE ... | 25/07/2026 | 25/07/2026 | 383186 |
| CVE-2026-64393 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with ope ... | 25/07/2026 | 25/07/2026 | 383208 |
| CVE-2026-64392 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credential ... | 25/07/2026 | 25/07/2026 | 383191 |
| CVE-2026-64391 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credential ... | 25/07/2026 | 25/07/2026 | 383207 |
| CVE-2026-64390 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection ... | 25/07/2026 | 25/07/2026 | 383206 |
| CVE-2026-64389 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 respo ... | 25/07/2026 | 25/07/2026 | 383240 |
| CVE-2026-64388 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp ... | 25/07/2026 | 25/07/2026 | 383205 |
| CVE-2026-64387 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query direc ... | 25/07/2026 | 25/07/2026 | 383204 |
| CVE-2026-64386 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info( ... | 25/07/2026 | 25/07/2026 | 383203 |
| CVE-2026-64385 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free ... | 25/07/2026 | 25/07/2026 | 383202 |
| CVE-2026-64384 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change noti ... | 25/07/2026 | 25/07/2026 | 383180 |
| CVE-2026-64383 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free ... | 25/07/2026 | 25/07/2026 | 383179 |
| CVE-2026-64382 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free ... | 25/07/2026 | 25/07/2026 | 383178 |
| CVE-2026-64381 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer ... | 25/07/2026 | 25/07/2026 | 383172 |
| CVE-2026-64380 | In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SI ... | 25/07/2026 | 25/07/2026 | 383177 |
| CVE-2026-64379 | In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-pro ... | 25/07/2026 | 25/07/2026 | 383176 |
| CVE-2026-64378 | In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between ... | 25/07/2026 | 25/07/2026 | 383171 |
| CVE-2026-64377 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fi ... | 25/07/2026 | 25/07/2026 | 383175 |
| CVE-2026-64376 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: fix device ... | 25/07/2026 | 25/07/2026 | 383174 |
| CVE-2026-64375 | In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_acc ... | 25/07/2026 | 25/07/2026 | 383173 |
| CVE-2026-64374 | In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT_PUSH_IPI b ... | 25/07/2026 | 25/07/2026 | 383170 |
| CVE-2026-64373 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend ... | 25/07/2026 | 25/07/2026 | 383164 |
| CVE-2026-64372 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after- ... | 25/07/2026 | 25/07/2026 | 383169 |
| CVE-2026-64371 | In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_acc ... | 25/07/2026 | 25/07/2026 | 383168 |
| CVE-2026-64370 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid re ... | 25/07/2026 | 25/07/2026 | 383167 |
| CVE-2026-64369 | In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCA ... | 25/07/2026 | 25/07/2026 | 383163 |
| CVE-2026-64368 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroin ... | 25/07/2026 | 25/07/2026 | 383162 |
| CVE-2026-64367 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validat ... | 25/07/2026 | 25/07/2026 | 383161 |
| CVE-2026-64366 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of- ... | 25/07/2026 | 25/07/2026 | 383166 |
| CVE-2026-64365 | In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on i ... | 25/07/2026 | 25/07/2026 | 383165 |
| CVE-2026-64364 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of- ... | 25/07/2026 | 25/07/2026 | 383159 |
| CVE-2026-64363 | In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pen ... | 25/07/2026 | 25/07/2026 | 383151 |
| CVE-2026-64362 | In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending ... | 25/07/2026 | 25/07/2026 | 383158 |
| CVE-2026-64361 | In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflo ... | 25/07/2026 | 25/07/2026 | 383157 |
| CVE-2026-64360 | In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize ... | 25/07/2026 | 25/07/2026 | 383156 |
| CVE-2026-64359 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEAN_SEGMENT ... | 25/07/2026 | 25/07/2026 | 383152 |
| CVE-2026-64358 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel work ... | 25/07/2026 | 25/07/2026 | 383155 |
| CVE-2026-64357 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservatio ... | 25/07/2026 | 25/07/2026 | 383160 |
| CVE-2026-64356 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_ ... | 25/07/2026 | 25/07/2026 | 383153 |
| CVE-2026-64355 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frame ... | 25/07/2026 | 25/07/2026 | 383154 |
| CVE-2026-64354 | In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated f ... | 25/07/2026 | 25/07/2026 | 383150 |
| CVE-2026-64353 | In the Linux kernel, the following vulnerability has been resolved: bpf: Keep dynamic inner arra ... | 25/07/2026 | 25/07/2026 | 383149 |
| CVE-2026-64352 | In the Linux kernel, the following vulnerability has been resolved: bpf: Allow LPM map access fr ... | 25/07/2026 | 25/07/2026 | 383142 |
| CVE-2026-64351 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX f ... | 25/07/2026 | 25/07/2026 | 383148 |
| CVE-2026-64350 | In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream conte ... | 25/07/2026 | 25/07/2026 | 383147 |
| CVE-2026-64349 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix dwc3_readl() ... | 25/07/2026 | 25/07/2026 | 383146 |
| CVE-2026-64348 | In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on f ... | 25/07/2026 | 25/07/2026 | 383141 |
| CVE-2026-64347 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix ... | 25/07/2026 | 25/07/2026 | 383145 |
| CVE-2026-64346 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-af ... | 25/07/2026 | 25/07/2026 | 383144 |
| CVE-2026-64345 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take ... | 25/07/2026 | 25/07/2026 | 383143 |
| CVE-2026-64344 | In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after- ... | 25/07/2026 | 25/07/2026 | 383138 |
| CVE-2026-64343 | In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-fr ... | 25/07/2026 | 25/07/2026 | 383137 |
| CVE-2026-64342 | In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-afte ... | 25/07/2026 | 25/07/2026 | 383133 |
| CVE-2026-64341 | In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-afte ... | 25/07/2026 | 25/07/2026 | 383136 |
| CVE-2026-64340 | In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-a ... | 25/07/2026 | 25/07/2026 | 383135 |
| CVE-2026-64339 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk ... | 25/07/2026 | 25/07/2026 | 383134 |
| CVE-2026-64338 | In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregiste ... | 25/07/2026 | 25/07/2026 | 383132 |
| CVE-2026-64337 | In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA ... | 25/07/2026 | 25/07/2026 | 383139 |
| CVE-2026-64336 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan_pda: fi ... | 25/07/2026 | 25/07/2026 | 383131 |
| CVE-2026-10681 | In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/use ... | 25/07/2026 | 25/07/2026 | 383140 |
| CVE-2026-64335 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport ... | 25/07/2026 | 25/07/2026 | 383124 |
| CVE-2026-64334 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport ... | 25/07/2026 | 25/07/2026 | 383130 |
| CVE-2026-64333 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport ... | 25/07/2026 | 25/07/2026 | 383123 |
| CVE-2026-64332 | In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak o ... | 25/07/2026 | 25/07/2026 | 383129 |
| CVE-2026-64331 | In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref ... | 25/07/2026 | 25/07/2026 | 383128 |
| CVE-2026-64330 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate S ... | 25/07/2026 | 25/07/2026 | 383121 |
| CVE-2026-64329 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix u ... | 25/07/2026 | 25/07/2026 | 383127 |
| CVE-2026-64328 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix DMA f ... | 25/07/2026 | 25/07/2026 | 383122 |
| CVE-2026-64327 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Initializ ... | 25/07/2026 | 25/07/2026 | 383126 |
| CVE-2026-64326 | In the Linux kernel, the following vulnerability has been resolved: block: skip sync_blockdev() ... | 25/07/2026 | 25/07/2026 | 383125 |
| CVE-2026-64325 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: f ... | 25/07/2026 | 25/07/2026 | 383113 |
| CVE-2026-64324 | In the Linux kernel, the following vulnerability has been resolved: udf: validate free block ext ... | 25/07/2026 | 25/07/2026 | 383120 |
| CVE-2026-64323 | In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header len ... | 25/07/2026 | 25/07/2026 | 383118 |
| CVE-2026-64322 | In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table ... | 25/07/2026 | 25/07/2026 | 383117 |
| CVE-2026-64321 | In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev ... | 25/07/2026 | 25/07/2026 | 383116 |
| CVE-2026-64320 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-b ... | 25/07/2026 | 25/07/2026 | 383119 |
| CVE-2026-64319 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply m ... | 25/07/2026 | 25/07/2026 | 383114 |
| CVE-2026-64318 | In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the p ... | 25/07/2026 | 25/07/2026 | 383111 |
| CVE-2026-64317 | In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge syml ... | 25/07/2026 | 25/07/2026 | 383112 |
| CVE-2026-64316 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex ... | 25/07/2026 | 25/07/2026 | 383115 |
| CVE-2026-64315 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex ... | 25/07/2026 | 25/07/2026 | 383110 |
| CVE-2026-64314 | In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - v ... | 25/07/2026 | 25/07/2026 | 383109 |
| CVE-2026-64313 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry over ... | 25/07/2026 | 25/07/2026 | 383103 |
| CVE-2026-64312 | In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore cal ... | 25/07/2026 | 25/07/2026 | 383102 |
| CVE-2026-64311 | In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove br ... | 25/07/2026 | 25/07/2026 | 383108 |
| CVE-2026-64310 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ... | 25/07/2026 | 25/07/2026 | 383107 |
| CVE-2026-64309 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ... | 25/07/2026 | 25/07/2026 | 383101 |
| CVE-2026-64308 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ... | 25/07/2026 | 25/07/2026 | 383106 |
| CVE-2026-64307 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ... | 25/07/2026 | 25/07/2026 | 383105 |
| CVE-2026-64306 | In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning ... | 25/07/2026 | 25/07/2026 | 383104 |
| CVE-2026-64305 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect servic ... | 25/07/2026 | 25/07/2026 | 383098 |
| CVE-2026-64304 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA C ... | 25/07/2026 | 25/07/2026 | 383097 |
| CVE-2026-64303 | In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate th ... | 25/07/2026 | 25/07/2026 | 383094 |
| CVE-2026-64302 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-s ... | 25/07/2026 | 25/07/2026 | 383093 |
| CVE-2026-64301 | In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node ... | 25/07/2026 | 25/07/2026 | 383096 |
| CVE-2026-64300 | In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in ma ... | 25/07/2026 | 25/07/2026 | 383100 |
| CVE-2026-64299 | In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-boun ... | 25/07/2026 | 25/07/2026 | 383095 |
| CVE-2026-64298 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in ... | 25/07/2026 | 25/07/2026 | 383099 |
| CVE-2026-64297 | In the Linux kernel, the following vulnerability has been resolved: module: decompress: check re ... | 25/07/2026 | 25/07/2026 | 383092 |
| CVE-2026-64296 | In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance ... | 25/07/2026 | 25/07/2026 | 383091 |
| CVE-2026-64295 | In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limi ... | 25/07/2026 | 25/07/2026 | 383082 |
| CVE-2026-64294 | In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks ... | 25/07/2026 | 25/07/2026 | 383081 |
| CVE-2026-64293 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) in ... | 25/07/2026 | 25/07/2026 | 383090 |
| CVE-2026-64292 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory ... | 25/07/2026 | 25/07/2026 | 383089 |
| CVE-2026-64291 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth u ... | 25/07/2026 | 25/07/2026 | 383088 |
| CVE-2026-64290 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on f ... | 25/07/2026 | 25/07/2026 | 383087 |
| CVE-2026-64289 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on ... | 25/07/2026 | 25/07/2026 | 383086 |
| CVE-2026-64288 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid derefe ... | 25/07/2026 | 25/07/2026 | 383085 |
| CVE-2026-64287 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound used_lrs w ... | 25/07/2026 | 25/07/2026 | 383084 |
| CVE-2026-64286 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear __hyp_runn ... | 25/07/2026 | 25/07/2026 | 383083 |
| CVE-2026-64285 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page fo ... | 25/07/2026 | 25/07/2026 | 383072 |
| CVE-2026-64284 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor' ... | 25/07/2026 | 25/07/2026 | 383071 |
| CVE-2026-64283 | In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat mems ... | 25/07/2026 | 25/07/2026 | 383069 |
| CVE-2026-64282 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak ... | 25/07/2026 | 25/07/2026 | 383076 |
| CVE-2026-64281 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: wake sq waiters whe ... | 25/07/2026 | 25/07/2026 | 383077 |
| CVE-2026-64280 | In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA ... | 25/07/2026 | 25/07/2026 | 383073 |
| CVE-2026-64279 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter dereg ... | 25/07/2026 | 25/07/2026 | 383070 |
| CVE-2026-66013 | OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registra ... | 25/07/2026 | 25/07/2026 | 383079 |
| CVE-2026-66012 | SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endp ... | 25/07/2026 | 25/07/2026 | 383080 |
| CVE-2026-66011 | ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line inte ... | 25/07/2026 | 25/07/2026 | 383078 |
| CVE-2026-64278 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C ada ... | 25/07/2026 | 25/07/2026 | 383060 |
| CVE-2026-64277 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - boun ... | 25/07/2026 | 25/07/2026 | 383067 |
| CVE-2026-64276 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - boun ... | 25/07/2026 | 25/07/2026 | 383066 |
| CVE-2026-64275 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent di ... | 25/07/2026 | 25/07/2026 | 383068 |
| CVE-2026-64274 | In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the de ... | 25/07/2026 | 25/07/2026 | 383064 |
| CVE-2026-64273 | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the de ... | 25/07/2026 | 25/07/2026 | 383059 |
| CVE-2026-64272 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch in ... | 25/07/2026 | 25/07/2026 | 383063 |
| CVE-2026-64271 | In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the ... | 25/07/2026 | 25/07/2026 | 383062 |
| CVE-2026-64270 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an ov ... | 25/07/2026 | 25/07/2026 | 383061 |
| CVE-2026-64269 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Wr ... | 25/07/2026 | 25/07/2026 | 383058 |
| CVE-2026-64268 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Respons ... | 25/07/2026 | 25/07/2026 | 383057 |
| CVE-2026-64267 | In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune not ... | 25/07/2026 | 25/07/2026 | 383056 |
| CVE-2026-64266 | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before ... | 25/07/2026 | 25/07/2026 | 383055 |
| CVE-2026-64529 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused ... | 25/07/2026 | 25/07/2026 | 383054 |
| CVE-2026-64528 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove ... | 25/07/2026 | 25/07/2026 | 383053 |
| CVE-2026-64527 | In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus p ... | 25/07/2026 | 25/07/2026 | 383050 |
| CVE-2026-64526 | In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missi ... | 25/07/2026 | 25/07/2026 | 383052 |
| CVE-2026-64525 | In the Linux kernel, the following vulnerability has been resolved: xfrm: move policy_bydst RCU ... | 25/07/2026 | 25/07/2026 | 383049 |
| CVE-2026-64524 | In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolut ... | 25/07/2026 | 25/07/2026 | 383051 |
| CVE-2026-64523 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-l ... | 25/07/2026 | 25/07/2026 | 383048 |
| CVE-2026-64265 | In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fu ... | 25/07/2026 | 25/07/2026 | 383047 |
| CVE-2026-64264 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobb ... | 25/07/2026 | 25/07/2026 | 383042 |
| CVE-2026-64263 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cance ... | 25/07/2026 | 25/07/2026 | 383046 |
| CVE-2026-64262 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on ... | 25/07/2026 | 25/07/2026 | 383041 |
| CVE-2026-64261 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after- ... | 25/07/2026 | 25/07/2026 | 383045 |
| CVE-2026-64260 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue- sto ... | 25/07/2026 | 25/07/2026 | 383040 |
| CVE-2026-64259 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req ... | 25/07/2026 | 25/07/2026 | 383038 |
| CVE-2026-64258 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-l ... | 25/07/2026 | 25/07/2026 | 383044 |
| CVE-2026-64257 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapp ... | 25/07/2026 | 25/07/2026 | 383039 |
| CVE-2026-64256 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around ... | 25/07/2026 | 25/07/2026 | 383043 |
| CVE-2026-15037 | Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instructio ... | 25/07/2026 | 25/07/2026 | 382573 |
| CVE-2026-15308 | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through re ... | 25/07/2026 | 25/07/2026 | 377242 |
| CVE-2026-14257 | brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expa ... | 25/07/2026 | 25/07/2026 | 382589 |
| CVE-2026-12548 | A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an in ... | 25/07/2026 | 25/07/2026 | 381020 |
| CVE-2026-12478 | The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard insi ... | 25/07/2026 | 25/07/2026 | 378284 |
| CVE-2026-16766 | Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) v ... | 25/07/2026 | 25/07/2026 | 383037 |
| CVE-2026-15425 | The Yoast SEO Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vul ... | 25/07/2026 | 25/07/2026 | 383036 |
| CVE-2026-10818 | The WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up t ... | 25/07/2026 | 25/07/2026 | 383035 |
| CVE-2026-14955 | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory ... | 25/07/2026 | 25/07/2026 | 383034 |
| CVE-2026-66374 | Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the ... | 25/07/2026 | 25/07/2026 | 383033 |
| CVE-2026-66373 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, all ... | 25/07/2026 | 25/07/2026 | 383032 |
| CVE-2026-15690 | A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function ... | 25/07/2026 | 25/07/2026 | 378237 |
| CVE-2026-15813 | A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version af ... | 25/07/2026 | 25/07/2026 | 380561 |
| CVE-2026-15812 | A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet (Vers ... | 25/07/2026 | 25/07/2026 | 380810 |
| CVE-2026-15811 | A vulnerability was found in kronosnet's (version =1.34) cryptographic configuration manag ... | 25/07/2026 | 25/07/2026 | 380699 |
| CVE-2026-15588 | A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of ... | 25/07/2026 | 25/07/2026 | 379531 |
| CVE-2026-16768 | A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that ... | 25/07/2026 | 25/07/2026 | 382758 |
| CVE-2026-66339 | A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsou ... | 25/07/2026 | 25/07/2026 | 383031 |
| CVE-2026-66338 | A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing func ... | 25/07/2026 | 25/07/2026 | 383029 |
| CVE-2026-66337 | A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_ ... | 25/07/2026 | 25/07/2026 | 383030 |
| CVE-2026-61884 | The web management interface of Tycon Systems TPDIN-Monitor-WEB2 does not perform server-side v ... | 25/07/2026 | 25/07/2026 | 383022 |
| CVE-2026-55985 | The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system cre ... | 25/07/2026 | 25/07/2026 | 383024 |
| CVE-2026-61892 | Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. | 25/07/2026 | 25/07/2026 | 383028 |
| CVE-2026-61886 | Weintek cMT3092X HMI stores user account passwords in plaintext. | 25/07/2026 | 25/07/2026 | 383027 |
| CVE-2026-60135 | An attacker can modify data that should be restricted to read‑only access. | 25/07/2026 | 25/07/2026 | 383026 |
| CVE-2026-60134 | Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges. | 25/07/2026 | 25/07/2026 | 383025 |
| CVE-2026-16280 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit trunc ... | 25/07/2026 | 25/07/2026 | 383023 |