CVE信息

2026

CVE描述提交管理条目
CVE-2026-57990Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an ...2026-07-262026-07-26383356
CVE-2026-57989Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to di ...2026-07-262026-07-26383355
CVE-2026-36189Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc ...2026-07-262026-07-26365032
CVE-2026-14899The code to parse MIME headers for display when forwarding a message (if the setting to view all ...2026-07-262026-07-26382448
CVE-2026-59674A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package a ...2026-07-262026-07-26378264
CVE-2026-12590Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), when the parser ...2026-07-262026-07-26377179
CVE-2026-12547SoupAuthManager caches proxy authentication credentials without scoping them to the proxy author ...2026-07-262026-07-26381016
CVE-2026-12484A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-con ...2026-07-262026-07-26380531
CVE-2026-12482A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar a ...2026-07-262026-07-26378257
CVE-2026-12681Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go- ...2026-07-262026-07-26373107
CVE-2026-57978Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pe ...2026-07-262026-07-26383352
CVE-2026-17497NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, pyt ...2026-07-262026-07-26383326
CVE-2026-17496NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and i ...2026-07-262026-07-26383327
CVE-2026-17459A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the fu ...2026-07-262026-07-26383321
CVE-2026-17458A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickVia ...2026-07-262026-07-26383320
CVE-2026-17457A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the ...2026-07-262026-07-26383319
CVE-2026-64530In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle T ...2026-07-262026-07-26383324
CVE-2026-63720datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that al ...2026-07-262026-07-26383323
CVE-2026-17434A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpSe ...2026-07-262026-07-26383075
CVE-2026-17433A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function create ...2026-07-262026-07-26383074
CVE-2026-15962The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in a ...2026-07-262026-07-26383322
CVE-2026-17432A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerabili ...2026-07-262026-07-26383065
CVE-2026-64522In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode ...2026-07-252026-07-25383317
CVE-2026-64521In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: ...2026-07-252026-07-25383316
CVE-2026-64520In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PAR ...2026-07-252026-07-25383314
CVE-2026-64519In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in l ...2026-07-252026-07-25383315
CVE-2026-64518In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds acces ...2026-07-252026-07-25383306
CVE-2026-64517In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free ...2026-07-252026-07-25383305
CVE-2026-64516In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 f ...2026-07-252026-07-25383304
CVE-2026-64515In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defr ...2026-07-252026-07-25383303
CVE-2026-64514In the Linux kernel, the following vulnerability has been resolved: userfaultfd: gate must_wait ...2026-07-252026-07-25383313
CVE-2026-64513In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally re ...2026-07-252026-07-25383296
CVE-2026-64512In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN w ...2026-07-252026-07-25383294
CVE-2026-64511In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possib ...2026-07-252026-07-25383302
CVE-2026-64510In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_n ...2026-07-252026-07-25383312
CVE-2026-64509In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cle ...2026-07-252026-07-25383311
CVE-2026-64508In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening a ...2026-07-252026-07-25383301
CVE-2026-64507In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush ...2026-07-252026-07-25383300
CVE-2026-64506In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop lo ...2026-07-252026-07-25383295
CVE-2026-64505In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis ...2026-07-252026-07-25383310
CVE-2026-64504In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp th ...2026-07-252026-07-25383299
CVE-2026-64503In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runti ...2026-07-252026-07-25383309
CVE-2026-64502In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fi ...2026-07-252026-07-25383308
CVE-2026-64501In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fi ...2026-07-252026-07-25383318
CVE-2026-64500In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initializ ...2026-07-252026-07-25383298
CVE-2026-64499In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM ...2026-07-252026-07-25383307
CVE-2026-64498In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fr ...2026-07-252026-07-25383297
CVE-2026-64497In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanu ...2026-07-252026-07-25383293
CVE-2026-64496In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO r ...2026-07-252026-07-25383292
CVE-2026-64495In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out ...2026-07-252026-07-25383291
CVE-2026-64494In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix ru ...2026-07-252026-07-25383289
CVE-2026-64493In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix r ...2026-07-252026-07-25383290
CVE-2026-64492In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: us ...2026-07-252026-07-25383287
CVE-2026-64491In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix ...2026-07-252026-07-25383281
CVE-2026-64490In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate contr ...2026-07-252026-07-25383284
CVE-2026-64489In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check snd_ctl_ ...2026-07-252026-07-25383288
CVE-2026-64488In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check snd_ctl_new ...2026-07-252026-07-25383285
CVE-2026-64487In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix out-of-boun ...2026-07-252026-07-25383286
CVE-2026-64486In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_ ...2026-07-252026-07-25383283
CVE-2026-64485In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task cre ...2026-07-252026-07-25383282
CVE-2026-64484In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_ ...2026-07-252026-07-25383277
CVE-2026-64483In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: boun ...2026-07-252026-07-25383242
CVE-2026-64482In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd_ctl_new ...2026-07-252026-07-25383275
CVE-2026-64481In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmw ...2026-07-252026-07-25383276
CVE-2026-64480In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: check snd_ctl ...2026-07-252026-07-25383274
CVE-2026-64479In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised ...2026-07-252026-07-25383273
CVE-2026-64478In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobje ...2026-07-252026-07-25383279
CVE-2026-64477In the Linux kernel, the following vulnerability has been resolved: x86,fs/resctrl: Prevent out- ...2026-07-252026-07-25383278
CVE-2026-64476In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle ...2026-07-252026-07-25383254
CVE-2026-64475In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA ar ...2026-07-252026-07-25383263
CVE-2026-64474In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop ...2026-07-252026-07-25383272
CVE-2026-64473In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs ...2026-07-252026-07-25383262
CVE-2026-64472In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfield ...2026-07-252026-07-25383261
CVE-2026-64471In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-af ...2026-07-252026-07-25383252
CVE-2026-64470In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-af ...2026-07-252026-07-25383251
CVE-2026-64469In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_th ...2026-07-252026-07-25383271
CVE-2026-64468In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_fr ...2026-07-252026-07-25383270
CVE-2026-64467In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 strid ...2026-07-252026-07-25383269
CVE-2026-64466In the Linux kernel, the following vulnerability has been resolved: rust_binder: clear freeze li ...2026-07-252026-07-25383260
CVE-2026-64465In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atom ...2026-07-252026-07-25383245
CVE-2026-64464In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg ...2026-07-252026-07-25383268
CVE-2026-64463In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: u ...2026-07-252026-07-25383267
CVE-2026-64462In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource le ...2026-07-252026-07-25383249
CVE-2026-64461In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domai ...2026-07-252026-07-25383266
CVE-2026-64460In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable B ...2026-07-252026-07-25383259
CVE-2026-64459In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace perio ...2026-07-252026-07-25383247
CVE-2026-64458In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle ...2026-07-252026-07-25383250
CVE-2026-64457In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info poin ...2026-07-252026-07-25383258
CVE-2026-64456In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device- ...2026-07-252026-07-25383246
CVE-2026-64455In the Linux kernel, the following vulnerability has been resolved: USB: chaoskey: Fix slab-use- ...2026-07-252026-07-25383244
CVE-2026-64454In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget discon ...2026-07-252026-07-25383257
CVE-2026-64453In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: fix discon ...2026-07-252026-07-25383243
CVE-2026-64452In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-a ...2026-07-252026-07-25383265
CVE-2026-64451In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer de ...2026-07-252026-07-25383256
CVE-2026-64450In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read ...2026-07-252026-07-25383255
CVE-2026-64449In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: bound sla ...2026-07-252026-07-25383253
CVE-2026-64448In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implie ...2026-07-252026-07-25383248
CVE-2026-64447In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix do ...2026-07-252026-07-25383264
CVE-2026-64446In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap ...2026-07-252026-07-25383280
CVE-2026-64445In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP ...2026-07-252026-07-25383239
CVE-2026-64444In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ...2026-07-252026-07-25383238
CVE-2026-64443In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ...2026-07-252026-07-25383237
CVE-2026-64442In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ...2026-07-252026-07-25383236
CVE-2026-64441In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ...2026-07-252026-07-25383235
CVE-2026-64440In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB ...2026-07-252026-07-25383201
CVE-2026-64439In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out as ...2026-07-252026-07-25383234
CVE-2026-64438In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work ...2026-07-252026-07-25383241
CVE-2026-64437In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of ...2026-07-252026-07-25383190
CVE-2026-64436In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_ ...2026-07-252026-07-25383233
CVE-2026-64435In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb ...2026-07-252026-07-25383232
CVE-2026-64434In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix UAF in ...2026-07-252026-07-25383181
CVE-2026-64433In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of ...2026-07-252026-07-25383231
CVE-2026-64432In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Pag ...2026-07-252026-07-25383183
CVE-2026-64431In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling post_wri ...2026-07-252026-07-25383230
CVE-2026-64430In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid calling pci_ ...2026-07-252026-07-25383229
CVE-2026-64429In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spin ...2026-07-252026-07-25383200
CVE-2026-64428In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_ ...2026-07-252026-07-25383199
CVE-2026-64427In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfie ...2026-07-252026-07-25383198
CVE-2026-64426In the Linux kernel, the following vulnerability has been resolved: io_uring/nop: fix file refer ...2026-07-252026-07-25383197
CVE-2026-64425In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: re-check IO_ ...2026-07-252026-07-25383196
CVE-2026-64424In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-fre ...2026-07-252026-07-25383228
CVE-2026-64423In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast ...2026-07-252026-07-25383226
CVE-2026-64422In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reorder ...2026-07-252026-07-25383227
CVE-2026-64421In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix us ...2026-07-252026-07-25383224
CVE-2026-64420In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_ ...2026-07-252026-07-25383182
CVE-2026-64419In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU ...2026-07-252026-07-25383225
CVE-2026-64418In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_i ...2026-07-252026-07-25383223
CVE-2026-64417In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL point ...2026-07-252026-07-25383185
CVE-2026-64416In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL de ...2026-07-252026-07-25383189
CVE-2026-64415In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() ...2026-07-252026-07-25383195
CVE-2026-64414In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable ...2026-07-252026-07-25383222
CVE-2026-64413In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero ch ...2026-07-252026-07-25383221
CVE-2026-64412In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module ...2026-07-252026-07-25383220
CVE-2026-64411In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: termina ...2026-07-252026-07-25383219
CVE-2026-64410In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP t ...2026-07-252026-07-25383218
CVE-2026-64409In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix in ...2026-07-252026-07-25383194
CVE-2026-64408In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP c ...2026-07-252026-07-25383216
CVE-2026-64407In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix ou ...2026-07-252026-07-25383217
CVE-2026-64406In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in bt_acc ...2026-07-252026-07-25383214
CVE-2026-64405In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix nul ...2026-07-252026-07-25383215
CVE-2026-64404In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL d ...2026-07-252026-07-25383184
CVE-2026-64403In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate o ...2026-07-252026-07-25383193
CVE-2026-64402In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix ...2026-07-252026-07-25383213
CVE-2026-64401In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tco ...2026-07-252026-07-25383212
CVE-2026-64400In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversa ...2026-07-252026-07-25383188
CVE-2026-64399In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks ...2026-07-252026-07-25383211
CVE-2026-64398In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a permission chec ...2026-07-252026-07-25383192
CVE-2026-64397In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIREC ...2026-07-252026-07-25383210
CVE-2026-64396In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct fil ...2026-07-252026-07-25383209
CVE-2026-64395In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read a ...2026-07-252026-07-25383187
CVE-2026-64394In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITE_DAC/WRITE ...2026-07-252026-07-25383186
CVE-2026-64393In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with ope ...2026-07-252026-07-25383208
CVE-2026-64392In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credential ...2026-07-252026-07-25383191
CVE-2026-64391In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credential ...2026-07-252026-07-25383207
CVE-2026-64390In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection ...2026-07-252026-07-25383206
CVE-2026-64389In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 respo ...2026-07-252026-07-25383240
CVE-2026-64388In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp ...2026-07-252026-07-25383205
CVE-2026-64387In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query direc ...2026-07-252026-07-25383204
CVE-2026-64386In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info( ...2026-07-252026-07-25383203
CVE-2026-64385In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free ...2026-07-252026-07-25383202
CVE-2026-64384In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change noti ...2026-07-252026-07-25383180
CVE-2026-64383In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free ...2026-07-252026-07-25383179
CVE-2026-64382In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free ...2026-07-252026-07-25383178
CVE-2026-64381In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer ...2026-07-252026-07-25383172
CVE-2026-64380In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SI ...2026-07-252026-07-25383177
CVE-2026-64379In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-pro ...2026-07-252026-07-25383176
CVE-2026-64378In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between ...2026-07-252026-07-25383171
CVE-2026-64377In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fi ...2026-07-252026-07-25383175
CVE-2026-64376In the Linux kernel, the following vulnerability has been resolved: firmware_loader: fix device ...2026-07-252026-07-25383174
CVE-2026-64375In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_acc ...2026-07-252026-07-25383173
CVE-2026-64374In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT_PUSH_IPI b ...2026-07-252026-07-25383170
CVE-2026-64373In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend ...2026-07-252026-07-25383164
CVE-2026-64372In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after- ...2026-07-252026-07-25383169
CVE-2026-64371In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_acc ...2026-07-252026-07-25383168
CVE-2026-64370In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid re ...2026-07-252026-07-25383167
CVE-2026-64369In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCA ...2026-07-252026-07-25383163
CVE-2026-64368In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroin ...2026-07-252026-07-25383162
CVE-2026-64367In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validat ...2026-07-252026-07-25383161
CVE-2026-64366In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of- ...2026-07-252026-07-25383166
CVE-2026-64365In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on i ...2026-07-252026-07-25383165
CVE-2026-64364In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of- ...2026-07-252026-07-25383159
CVE-2026-64363In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pen ...2026-07-252026-07-25383151
CVE-2026-64362In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending ...2026-07-252026-07-25383158
CVE-2026-64361In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflo ...2026-07-252026-07-25383157
CVE-2026-64360In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize ...2026-07-252026-07-25383156
CVE-2026-64359In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEAN_SEGMENT ...2026-07-252026-07-25383152
CVE-2026-64358In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel work ...2026-07-252026-07-25383155
CVE-2026-64357In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservatio ...2026-07-252026-07-25383160
CVE-2026-64356In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_ ...2026-07-252026-07-25383153
CVE-2026-64355In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frame ...2026-07-252026-07-25383154
CVE-2026-64354In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated f ...2026-07-252026-07-25383150
CVE-2026-64353In the Linux kernel, the following vulnerability has been resolved: bpf: Keep dynamic inner arra ...2026-07-252026-07-25383149
CVE-2026-64352In the Linux kernel, the following vulnerability has been resolved: bpf: Allow LPM map access fr ...2026-07-252026-07-25383142
CVE-2026-64351In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX f ...2026-07-252026-07-25383148
CVE-2026-64350In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream conte ...2026-07-252026-07-25383147
CVE-2026-64349In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix dwc3_readl() ...2026-07-252026-07-25383146
CVE-2026-64348In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on f ...2026-07-252026-07-25383141
CVE-2026-64347In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix ...2026-07-252026-07-25383145
CVE-2026-64346In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-af ...2026-07-252026-07-25383144
CVE-2026-64345In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take ...2026-07-252026-07-25383143
CVE-2026-64344In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after- ...2026-07-252026-07-25383138
CVE-2026-64343In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-fr ...2026-07-252026-07-25383137
CVE-2026-64342In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-afte ...2026-07-252026-07-25383133
CVE-2026-64341In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-afte ...2026-07-252026-07-25383136
CVE-2026-64340In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-a ...2026-07-252026-07-25383135
CVE-2026-64339In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk ...2026-07-252026-07-25383134
CVE-2026-64338In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregiste ...2026-07-252026-07-25383132
CVE-2026-64337In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA ...2026-07-252026-07-25383139
CVE-2026-64336In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan_pda: fi ...2026-07-252026-07-25383131
CVE-2026-10681In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/use ...2026-07-252026-07-25383140
CVE-2026-64335In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport ...2026-07-252026-07-25383124
CVE-2026-64334In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport ...2026-07-252026-07-25383130
CVE-2026-64333In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport ...2026-07-252026-07-25383123
CVE-2026-64332In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak o ...2026-07-252026-07-25383129
CVE-2026-64331In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref ...2026-07-252026-07-25383128
CVE-2026-64330In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate S ...2026-07-252026-07-25383121
CVE-2026-64329In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix u ...2026-07-252026-07-25383127
CVE-2026-64328In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix DMA f ...2026-07-252026-07-25383122
CVE-2026-64327In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Initializ ...2026-07-252026-07-25383126
CVE-2026-64326In the Linux kernel, the following vulnerability has been resolved: block: skip sync_blockdev() ...2026-07-252026-07-25383125
CVE-2026-64325In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: f ...2026-07-252026-07-25383113
CVE-2026-64324In the Linux kernel, the following vulnerability has been resolved: udf: validate free block ext ...2026-07-252026-07-25383120
CVE-2026-64323In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header len ...2026-07-252026-07-25383118
CVE-2026-64322In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table ...2026-07-252026-07-25383117
CVE-2026-64321In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev ...2026-07-252026-07-25383116
CVE-2026-64320In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-b ...2026-07-252026-07-25383119
CVE-2026-64319In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply m ...2026-07-252026-07-25383114
CVE-2026-64318In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the p ...2026-07-252026-07-25383111
CVE-2026-64317In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge syml ...2026-07-252026-07-25383112
CVE-2026-64316In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex ...2026-07-252026-07-25383115
CVE-2026-64315In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex ...2026-07-252026-07-25383110
CVE-2026-64314In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - v ...2026-07-252026-07-25383109
CVE-2026-64313In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry over ...2026-07-252026-07-25383103
CVE-2026-64312In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore cal ...2026-07-252026-07-25383102
CVE-2026-64311In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove br ...2026-07-252026-07-25383108
CVE-2026-64310In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ...2026-07-252026-07-25383107
CVE-2026-64309In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ...2026-07-252026-07-25383101
CVE-2026-64308In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ...2026-07-252026-07-25383106
CVE-2026-64307In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initial ...2026-07-252026-07-25383105
CVE-2026-64306In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning ...2026-07-252026-07-25383104
CVE-2026-64305In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect servic ...2026-07-252026-07-25383098
CVE-2026-64304In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA C ...2026-07-252026-07-25383097
CVE-2026-64303In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate th ...2026-07-252026-07-25383094
CVE-2026-64302In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-s ...2026-07-252026-07-25383093
CVE-2026-64301In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix of_node ...2026-07-252026-07-25383096
CVE-2026-64300In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in ma ...2026-07-252026-07-25383100
CVE-2026-64299In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-boun ...2026-07-252026-07-25383095
CVE-2026-64298In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in ...2026-07-252026-07-25383099
CVE-2026-64297In the Linux kernel, the following vulnerability has been resolved: module: decompress: check re ...2026-07-252026-07-25383092
CVE-2026-64296In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance ...2026-07-252026-07-25383091
CVE-2026-64295In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limi ...2026-07-252026-07-25383082
CVE-2026-64294In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks ...2026-07-252026-07-25383081
CVE-2026-64293In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) in ...2026-07-252026-07-25383090
CVE-2026-64292In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory ...2026-07-252026-07-25383089
CVE-2026-64291In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth u ...2026-07-252026-07-25383088
CVE-2026-64290In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on f ...2026-07-252026-07-25383087
CVE-2026-64289In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on ...2026-07-252026-07-25383086
CVE-2026-64288In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid derefe ...2026-07-252026-07-25383085
CVE-2026-64287In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound used_lrs w ...2026-07-252026-07-25383084
CVE-2026-64286In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear __hyp_runn ...2026-07-252026-07-25383083
CVE-2026-64285In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page fo ...2026-07-252026-07-25383072
CVE-2026-64284In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor&#039 ...2026-07-252026-07-25383071
CVE-2026-64283In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat mems ...2026-07-252026-07-25383069
CVE-2026-64282In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak ...2026-07-252026-07-25383076
CVE-2026-64281In the Linux kernel, the following vulnerability has been resolved: svcrdma: wake sq waiters whe ...2026-07-252026-07-25383077
CVE-2026-64280In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA ...2026-07-252026-07-25383073
CVE-2026-64279In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter dereg ...2026-07-252026-07-25383070
CVE-2026-66013OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registra ...2026-07-252026-07-25383079
CVE-2026-66012SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endp ...2026-07-252026-07-25383080
CVE-2026-66011ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line inte ...2026-07-252026-07-25383078
CVE-2026-64278In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C ada ...2026-07-252026-07-25383060
CVE-2026-64277In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - boun ...2026-07-252026-07-25383067
CVE-2026-64276In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - boun ...2026-07-252026-07-25383066
CVE-2026-64275In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent di ...2026-07-252026-07-25383068
CVE-2026-64274In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the de ...2026-07-252026-07-25383064
CVE-2026-64273In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the de ...2026-07-252026-07-25383059
CVE-2026-64272In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch in ...2026-07-252026-07-25383063
CVE-2026-64271In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the ...2026-07-252026-07-25383062
CVE-2026-64270In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an ov ...2026-07-252026-07-25383061
CVE-2026-64269In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Wr ...2026-07-252026-07-25383058
CVE-2026-64268In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Respons ...2026-07-252026-07-25383057
CVE-2026-64267In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune not ...2026-07-252026-07-25383056
CVE-2026-64266In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before ...2026-07-252026-07-25383055
CVE-2026-64529In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused ...2026-07-252026-07-25383054
CVE-2026-64528In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove ...2026-07-252026-07-25383053
CVE-2026-64527In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus p ...2026-07-252026-07-25383050
CVE-2026-64526In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missi ...2026-07-252026-07-25383052
CVE-2026-64525In the Linux kernel, the following vulnerability has been resolved: xfrm: move policy_bydst RCU ...2026-07-252026-07-25383049
CVE-2026-64524In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolut ...2026-07-252026-07-25383051
CVE-2026-64523In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-l ...2026-07-252026-07-25383048
CVE-2026-64265In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fu ...2026-07-252026-07-25383047
CVE-2026-64264In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobb ...2026-07-252026-07-25383042
CVE-2026-64263In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cance ...2026-07-252026-07-25383046
CVE-2026-64262In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on ...2026-07-252026-07-25383041
CVE-2026-64261In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after- ...2026-07-252026-07-25383045
CVE-2026-64260In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue- sto ...2026-07-252026-07-25383040
CVE-2026-64259In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req ...2026-07-252026-07-25383038
CVE-2026-64258In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-l ...2026-07-252026-07-25383044
CVE-2026-64257In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapp ...2026-07-252026-07-25383039
CVE-2026-64256In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around ...2026-07-252026-07-25383043
CVE-2026-15308The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through re ...2026-07-252026-07-25377242
CVE-2026-12548A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an in ...2026-07-252026-07-25381020
CVE-2026-12478The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard insi ...2026-07-252026-07-25378284
CVE-2026-16766Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) v ...2026-07-252026-07-25383037
CVE-2026-15425The Yoast SEO Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vul ...2026-07-252026-07-25383036
CVE-2026-10818The WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up t ...2026-07-252026-07-25383035
CVE-2026-14955The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory ...2026-07-252026-07-25383034
CVE-2026-66374Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the ...2026-07-252026-07-25383033
CVE-2026-66373Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, all ...2026-07-252026-07-25383032
CVE-2026-15690A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function ...2026-07-252026-07-25378237
CVE-2026-15813A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version af ...2026-07-252026-07-25380561
CVE-2026-15812A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet (Vers ...2026-07-252026-07-25380810
CVE-2026-15811A vulnerability was found in kronosnet's (version =1.34) cryptographic configuration manag ...2026-07-252026-07-25380699
CVE-2026-15588A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of ...2026-07-252026-07-25379531
CVE-2026-66339A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsou ...2026-07-252026-07-25383031
CVE-2026-66338A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing func ...2026-07-252026-07-25383029
CVE-2026-66337A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_ ...2026-07-252026-07-25383030
CVE-2026-61884The web management interface of Tycon Systems TPDIN-Monitor-WEB2 does not perform server-side v ...2026-07-252026-07-25383022
CVE-2026-55985The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system cre ...2026-07-252026-07-25383024
CVE-2026-61892Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.2026-07-252026-07-25383028
CVE-2026-61886Weintek cMT3092X HMI stores user account passwords in plaintext.2026-07-252026-07-25383027
CVE-2026-60135An attacker can modify data that should be restricted to read‑only access.2026-07-252026-07-25383026
CVE-2026-60134Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.2026-07-252026-07-25383025
CVE-2026-16280An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit trunc ...2026-07-252026-07-25383023
CVE-2026-66041FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerabi ...2026-07-242026-07-24383020
CVE-2026-66040FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability ...2026-07-242026-07-24383017
CVE-2026-66039FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability ...2026-07-242026-07-24383019
CVE-2026-66038FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability ...2026-07-242026-07-24383018
CVE-2026-66037FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vul ...2026-07-242026-07-24383012
CVE-2026-66036FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability ...2026-07-242026-07-24383013
CVE-2026-62835Improper authorization in Azure Portal allows an unauthorized attacker to disclose information o ...2026-07-242026-07-24383016
CVE-2026-57531Milkdown before 7.21.3 contains a DOM cross-site scripting vulnerability in the @milkdown/plugin ...2026-07-242026-07-24383015
CVE-2026-57530Milkdown before 7.21.3 contains a stored cross-site scripting vulnerability in the @milkdown/pre ...2026-07-242026-07-24383014
CVE-2026-48037Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure ...2026-07-242026-07-24383011
CVE-2026-48036Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure ...2026-07-242026-07-24383010
CVE-2026-48035Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure ...2026-07-242026-07-24383009
CVE-2026-48034Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure ...2026-07-242026-07-24383008
CVE-2026-48033Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure ...2026-07-242026-07-24383007
CVE-2026-48032Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure ...2026-07-242026-07-24383006
CVE-2026-17107A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster M ...2026-07-242026-07-24383005
CVE-2026-54342In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any ...2026-07-242026-07-24383003
CVE-2026-48021In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection betwee ...2026-07-242026-07-24383004
CVE-2026-66035libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overf ...2026-07-242026-07-24382987
CVE-2026-66034libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability t ...2026-07-242026-07-24382986
CVE-2026-66033libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow ...2026-07-242026-07-24382983
CVE-2026-66032libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sft ...2026-07-242026-07-24382985
CVE-2026-65711sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authen ...2026-07-242026-07-24382991
CVE-2026-65710sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authen ...2026-07-242026-07-24382990
CVE-2026-65709sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in th ...2026-07-242026-07-24382989
CVE-2026-65708sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that a ...2026-07-242026-07-24382988
CVE-2026-65707Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-l ...2026-07-242026-07-24382982
CVE-2026-65623Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote ...2026-07-242026-07-24382984
CVE-2026-66027Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that ...2026-07-242026-07-24383002
CVE-2026-65693Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allow ...2026-07-242026-07-24383001
CVE-2026-64255In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate ...2026-07-242026-07-24382999
CVE-2026-64254In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap( ...2026-07-242026-07-24382998
CVE-2026-64253In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_ ...2026-07-242026-07-24382997
CVE-2026-64252In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial c ...2026-07-242026-07-24382994
CVE-2026-64251In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after- ...2026-07-242026-07-24382996
CVE-2026-64250In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU ...2026-07-242026-07-24382993
CVE-2026-64249In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after- ...2026-07-242026-07-24382995
CVE-2026-64248In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU ...2026-07-242026-07-24382992
CVE-2026-64247In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the ...2026-07-242026-07-24383000
CVE-2026-64246In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-po ...2026-07-242026-07-24382981
CVE-2026-64245In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possibl ...2026-07-242026-07-24382976
CVE-2026-64244In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem ...2026-07-242026-07-24382980
CVE-2026-64243In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fi ...2026-07-242026-07-24382979
CVE-2026-64242In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix do ...2026-07-242026-07-24382978
CVE-2026-64241In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bug ...2026-07-242026-07-24382972
CVE-2026-64240In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix ...2026-07-242026-07-24382975
CVE-2026-64239In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: dele ...2026-07-242026-07-24382974
CVE-2026-64238In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock o ...2026-07-242026-07-24382973
CVE-2026-64237In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate f ...2026-07-242026-07-24382977
CVE-2026-64236In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division b ...2026-07-242026-07-24382971
CVE-2026-64235In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-re ...2026-07-242026-07-24382967
CVE-2026-64234In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add c ...2026-07-242026-07-24382970
CVE-2026-64233In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts- ...2026-07-242026-07-24382962
CVE-2026-64232In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrit ...2026-07-242026-07-24382966
CVE-2026-64231In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump ...2026-07-242026-07-24382969
CVE-2026-64230In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq ...2026-07-242026-07-24382965
CVE-2026-64229In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TL ...2026-07-242026-07-24382964
CVE-2026-64228In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NUL ...2026-07-242026-07-24382968
CVE-2026-64227In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COM ...2026-07-242026-07-24382963
CVE-2026-64226In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_ ...2026-07-242026-07-24382954
CVE-2026-64225In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bound ...2026-07-242026-07-24382960
CVE-2026-64224In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double fre ...2026-07-242026-07-24382953
CVE-2026-64223In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only ...2026-07-242026-07-24382959
CVE-2026-64222In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double f ...2026-07-242026-07-24382961
CVE-2026-64221In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after- ...2026-07-242026-07-24382958
CVE-2026-64220In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode- ...2026-07-242026-07-24382957
CVE-2026-64219In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate pa ...2026-07-242026-07-24382952
CVE-2026-64218In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_ ...2026-07-242026-07-24382956
CVE-2026-64217In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in ...2026-07-242026-07-24382955
CVE-2026-64216In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in ...2026-07-242026-07-24382949
CVE-2026-64215In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc ...2026-07-242026-07-24382948
CVE-2026-64214In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redunda ...2026-07-242026-07-24382950
CVE-2026-64213In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock prote ...2026-07-242026-07-24382944
CVE-2026-64212In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don&#039 ...2026-07-242026-07-24382947
CVE-2026-64211In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workq ...2026-07-242026-07-24382943
CVE-2026-64210In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked ...2026-07-242026-07-24382942
CVE-2026-64209In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out ...2026-07-242026-07-24382946
CVE-2026-64208In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack ...2026-07-242026-07-24382945
CVE-2026-17039A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perfo ...2026-07-242026-07-24382951
CVE-2026-8789The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data du ...2026-07-242026-07-24382938
CVE-2026-66007Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in fold ...2026-07-242026-07-24382941
CVE-2026-66006lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability ...2026-07-242026-07-24382940
CVE-2026-66005Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in it ...2026-07-242026-07-24382937
CVE-2026-66004BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhav ...2026-07-242026-07-24382939
CVE-2026-58630Improper access control in Azure App Service allows an unauthorized attacker to elevate privileg ...2026-07-242026-07-24382936
CVE-2026-58586Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP do ...2026-07-242026-07-24382933
CVE-2026-57106Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate pr ...2026-07-242026-07-24382935
CVE-2026-56163Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an una ...2026-07-242026-07-24382928
CVE-2026-49326Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan o ...2026-07-242026-07-24382927
CVE-2026-16802Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Un ...2026-07-242026-07-24382934
CVE-2026-16801Improper control of generation of code ('Code Injection') in the variables feature in ...2026-07-242026-07-24382932
CVE-2026-16800Improper control of generation of code ('Code Injection') in the schedule feature in D ...2026-07-242026-07-24382931
CVE-2026-16799Improper access control in the automation tests and workflows features in Devolutions PowerShell ...2026-07-242026-07-24382930
CVE-2026-16798Insertion of sensitive information into sent data in the automation jobs API in Devolutions Powe ...2026-07-242026-07-24382929
CVE-2026-8308Improper neutralization of input during web page generation ('cross-site scripting') v ...2026-07-242026-07-24382926
CVE-2026-7007The Zephyr ext2 file system validates the on-disk superblock in ext2_verify_disk_superblock() (s ...2026-07-242026-07-24382925
CVE-2026-55732Out-of-bounds Read (CWE-125) in BACnet packet parsing (`bacdt_datetime_to_tod`) in Loytec LIP-ME ...2026-07-242026-07-24382918
CVE-2026-55731Unchecked input for loop condition (CWE-606) in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GA ...2026-07-242026-07-24382917
CVE-2026-55730Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platfo ...2026-07-242026-07-24382924
CVE-2026-55729Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 ...2026-07-242026-07-24382923
CVE-2026-55728Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP- ...2026-07-242026-07-24382916
CVE-2026-17059A flaw was found in the role-users endpoint of the keycloak-services library, which is the core ...2026-07-242026-07-24382920
CVE-2026-12504Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, ...2026-07-242026-07-24382922
CVE-2026-12503Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L-I ...2026-07-242026-07-24382915
CVE-2026-12502Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE ...2026-07-242026-07-24382919
CVE-2026-12496Stored Cross-Site Scripting (CWE-79) in the OPC XML-DA server statistics in Loytec LIP-ME201C, L ...2026-07-242026-07-24382921
CVE-2026-17048A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and cli ...2026-07-242026-07-24382914
CVE-2026-16743A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-su ...2026-07-242026-07-24382913
CVE-2026-9765Note: The CVE and blog post don't exist because we determined this is actually a cloud-only ...2026-07-242026-07-24382909
CVE-2026-7484External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AV ...2026-07-242026-07-24382912
CVE-2026-66144Although remote policy references are not retrieved during policy normalization, if they are man ...2026-07-242026-07-24382911
CVE-2026-66143It is possible to bypass the maximum number of normalized policy alternatives that was introduce ...2026-07-242026-07-24382910
CVE-2026-66142Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids ...2026-07-242026-07-24382905
CVE-2026-66010DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed ...2026-07-242026-07-24382908
CVE-2026-66009Parse Server versions = 9.0.0 before 9.10.0-alpha.5 and = 8.2.2 before 8.6.86 return GraphQL v ...2026-07-242026-07-24382907
CVE-2026-66008Parse Server versions = 9.0.0 before 9.10.0-alpha.6 and = 8.2.2 before 8.6.87 disclose Pointer ...2026-07-242026-07-24382906
CVE-2026-46452Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could resu ...2026-07-242026-07-24382904
CVE-2026-45816NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This ...2026-07-242026-07-24382903
CVE-2026-45815Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variab ...2026-07-242026-07-24382902
CVE-2026-45813Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS ...2026-07-242026-07-24382899
CVE-2026-45812Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Adver ...2026-07-242026-07-24382901
CVE-2026-45811Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability i ...2026-07-242026-07-24382900
CVE-2026-16730A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFIL ...2026-07-242026-07-24382898
CVE-2026-15243Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the clie ...2026-07-242026-07-24382897
CVE-2026-15810A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25 ...2026-07-242026-07-24382895
CVE-2026-10610Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privil ...2026-07-242026-07-24382896
CVE-2026-7483Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully ...2026-07-242026-07-24382894
CVE-2026-16634TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. ...2026-07-242026-07-24382893
CVE-2026-15663The Ninja Forms The Contact Form Builder That Grows With You plugin for WordPress is vulnerabl ...2026-07-242026-07-24382890
CVE-2026-15401The VikBooking Hotel Booking Engine PMS plugin for WordPress is vulnerable to Stored Cross-Sit ...2026-07-242026-07-24382892
CVE-2026-10033The EventON Action User plugin for WordPress is vulnerable to authorization bypass in all versio ...2026-07-242026-07-24382891
CVE-2026-49745Kernel software installed and running inside a Guest VM may post improper commands to the GPU Fi ...2026-07-242026-07-24382888
CVE-2026-49744Kernel software installed and running inside a Guest VM may post improper commands to the GPU Fi ...2026-07-242026-07-24382887
CVE-2026-49743Software installed and run as a non-privileged user may conduct improper GPU system calls to man ...2026-07-242026-07-24382885
CVE-2026-24727An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload fun ...2026-07-242026-07-24382886
CVE-2026-12702In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows ...2026-07-242026-07-24382889
CVE-2026-63317Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache Ope ...2026-07-242026-07-24382880
CVE-2026-56392GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow ...2026-07-242026-07-24382879
CVE-2026-56391GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multi ...2026-07-242026-07-24382878
CVE-2026-15821The SureDash Community, Courses Member Dashboard plugin for WordPress is vulnerable to Store ...2026-07-242026-07-24382884
CVE-2026-15739The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scr ...2026-07-242026-07-24382882
CVE-2026-15704In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are ...2026-07-242026-07-24382881
CVE-2026-15346The VikBooking Hotel Booking Engine PMS plugin for WordPress is vulnerable to Reflected Cross- ...2026-07-242026-07-24382883
CVE-2026-16910A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webh ...2026-07-242026-07-24382869
CVE-2026-16519A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. ...2026-07-242026-07-24382877
CVE-2026-15755The Open User Map Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross- ...2026-07-242026-07-24382871
CVE-2026-15665The Fluent Support Helpdesk Customer Support Ticket System plugin for WordPress is vulnerabl ...2026-07-242026-07-24382876
CVE-2026-15653The Visualizer Tables Charts Manager with Built-in AI Generator plugin for WordPress is vuln ...2026-07-242026-07-24382875
CVE-2026-15648The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...2026-07-242026-07-24382870
CVE-2026-15464The WP Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via &#039 ...2026-07-242026-07-24382874
CVE-2026-15334The Cozy Blocks Page Builder for Gutenberg Editor FSE with 600+ Patterns, 58 Blocks Templa ...2026-07-242026-07-24382873
CVE-2026-15333The Cozy Blocks Page Builder for Gutenberg Editor FSE with 600+ Patterns, 58 Blocks Templa ...2026-07-242026-07-24382872
CVE-2026-12654The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to authorization b ...2026-07-242026-07-24382868
CVE-2026-14603The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authoriz ...2026-07-242026-07-24382866
CVE-2026-14172Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authentic ...2026-07-242026-07-24382867
CVE-2026-12981The CAFEHAUS API WordPress plugin through 1.0.0 does not have any authentication or authorisatio ...2026-07-242026-07-24382865
CVE-2026-12877The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 does not sa ...2026-07-242026-07-24382864
CVE-2026-12690The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its lice ...2026-07-242026-07-24382863
CVE-2026-12689The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership ...2026-07-242026-07-24382862
CVE-2026-12688The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before ...2026-07-242026-07-24382861
CVE-2026-12497The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile Restri ...2026-07-242026-07-24382860
CVE-2026-16870Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could ...2026-07-242026-07-24382859
CVE-2026-66141Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transpo ...2026-07-242026-07-24382856
CVE-2026-66140Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and con ...2026-07-242026-07-24382858
CVE-2026-66139OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID ...2026-07-242026-07-24382857
CVE-2026-66138In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can ...2026-07-242026-07-24382854
CVE-2026-54422In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed usin ...2026-07-242026-07-24382855
CVE-2026-6454The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in ...2026-07-242026-07-24382847
CVE-2026-15420The Nexter Blocks Gutenberg Blocks, Page Builder AI Website Builder plugin for WordPress is ...2026-07-242026-07-24382850
CVE-2026-15100The Post Grid Gutenberg Blocks PostX plugin for WordPress is vulnerable to Stored Cross-Site S ...2026-07-242026-07-24382853
CVE-2026-13464The Kirki Freeform Page Builder, Website Builder Customizer plugin for WordPress is vulnerab ...2026-07-242026-07-24382849
CVE-2026-12736The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and ...2026-07-242026-07-24382848
CVE-2026-11922A vulnerability in zenml-io/zenml versions 0.57.0 through 0.94.2 allows an attacker to bypass ra ...2026-07-242026-07-24382851
CVE-2026-11354The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure i ...2026-07-242026-07-24382846
CVE-2026-16118A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_pa ...2026-07-242026-07-24379939
CVE-2026-62825Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges ...2026-07-242026-07-24382844
CVE-2026-58275Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a ...2026-07-242026-07-24382843
CVE-2026-56191Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform ...2026-07-242026-07-24382836
CVE-2026-56167Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate p ...2026-07-242026-07-24382845
CVE-2026-56165Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code ...2026-07-242026-07-24382839
CVE-2026-56160Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate ...2026-07-242026-07-24382840
CVE-2026-54120Improper input validation in Microsoft Surface allows an authorized attacker to execute code ove ...2026-07-242026-07-24382838
CVE-2026-50517Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code ...2026-07-242026-07-24382842
CVE-2026-49159Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authoriz ...2026-07-242026-07-24382837
CVE-2026-35425Improper access control in Azure API Management (APIM) allows an authorized attacker to execute ...2026-07-242026-07-24382841
CVE-2026-50044Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerabil ...2026-07-242026-07-24382834
CVE-2026-44955Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information ...2026-07-242026-07-24382831
CVE-2026-42933Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerab ...2026-07-242026-07-24382833
CVE-2026-40430Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerabil ...2026-07-242026-07-24382835
CVE-2026-28698Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information ...2026-07-242026-07-24382832
CVE-2026-16767A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile:: ...2026-07-242026-07-24382660
CVE-2026-16807Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker ...2026-07-242026-07-24382830
CVE-2026-16806Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to e ...2026-07-242026-07-24382829
CVE-2026-16805Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to ex ...2026-07-242026-07-24382828
CVE-2026-16804Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who h ...2026-07-242026-07-24382827
CVE-2026-16765A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some ...2026-07-242026-07-24382637
CVE-2026-65694Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file control ...2026-07-232026-07-23382822
CVE-2026-65604Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass O ...2026-07-232026-07-23382821
CVE-2026-637329router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default passwo ...2026-07-232026-07-23382823
CVE-2026-633139Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web ...2026-07-232026-07-23382826
CVE-2026-16764A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserS ...2026-07-232026-07-23382629
CVE-2026-16763A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected ele ...2026-07-232026-07-23382620
CVE-2026-6924A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As su ...2026-07-232026-07-23382815
CVE-2026-50103A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network- ...2026-07-232026-07-23382817
CVE-2026-50032A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a netwo ...2026-07-232026-07-23382816
CVE-2026-49035The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate re ...2026-07-232026-07-23382814
CVE-2026-16002The affected product is vulnerable to an Out-of-bounds read, which may allow an attacker to cras ...2026-07-232026-07-23382818
CVE-2026-52439An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the typ ...2026-07-232026-07-23382810
CVE-2026-50039The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker ...2026-07-232026-07-23382812
CVE-2026-47724nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ...2026-07-232026-07-23382808
CVE-2026-38764An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate ...2026-07-232026-07-23382813
CVE-2026-34496Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue aff ...2026-07-232026-07-23382811
CVE-2026-21653Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Se ...2026-07-232026-07-23382809
CVE-2026-15981The SAML Single Sign On SSO Login plugin for WordPress is vulnerable to Authentication Bypass ...2026-07-232026-07-23382807
CVE-2026-47723nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ...2026-07-232026-07-23382802
CVE-2026-39155Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where t ...2026-07-232026-07-23382801
CVE-2026-21655Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows cape ...2026-07-232026-07-23382806
CVE-2026-16796Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock A ...2026-07-232026-07-23382798
CVE-2026-15968Improper neutralization of input during web page generation ('cross-site scripting') v ...2026-07-232026-07-23382803
CVE-2026-15967Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MO ...2026-07-232026-07-23382805
CVE-2026-15966Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit ...2026-07-232026-07-23382800
CVE-2026-15630A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or ...2026-07-232026-07-23382799
CVE-2026-10697Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Tra ...2026-07-232026-07-23382804
CVE-2026-60122gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in ...2026-07-232026-07-23382794
CVE-2026-48012Shopware is an open commerce platform. Versions 6.7.3.0 through 6.7.10.0 have an open redirect i ...2026-07-232026-07-23382796
CVE-2026-47722nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior ...2026-07-232026-07-23382795
CVE-2026-15212The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions ...2026-07-232026-07-23382797
CVE-2026-65706FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprec ...2026-07-232026-07-23382793
CVE-2026-65705FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfi ...2026-07-232026-07-23382785
CVE-2026-65704FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to caus ...2026-07-232026-07-23382784
CVE-2026-65703FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video ...2026-07-232026-07-23382783
CVE-2026-64785SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and ot ...2026-07-232026-07-23382792
CVE-2026-63359The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allo ...2026-07-232026-07-23382791
CVE-2026-48013Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the `/api/_action/media/ ...2026-07-232026-07-23382788
CVE-2026-47670DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authentica ...2026-07-232026-07-23382786
CVE-2026-47669DbGate is cross-platform database manager. In versions 7.1.8 and prior, the `unzipDirectory()` f ...2026-07-232026-07-23382787
CVE-2026-25800Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Start ...2026-07-232026-07-23382790
CVE-2026-12353An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process f ...2026-07-232026-07-23382789
CVE-2026-16756Missing connection and header-read timeouts and the absence of a concurrent-connection cap in th ...2026-07-232026-07-23382782
CVE-2026-15687A security issue was discovered in the Kubernetes Java client library where a compromised pod ma ...2026-07-232026-07-23382781
CVE-2026-65010Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Ex ...2026-07-232026-07-23382780
CVE-2026-63765Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads con ...2026-07-232026-07-23382779
CVE-2026-6516Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote c ...2026-07-232026-07-23382778
CVE-2026-65920Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in th ...2026-07-232026-07-23382775
CVE-2026-65919Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/ ...2026-07-232026-07-23382776
CVE-2026-65918PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read ...2026-07-232026-07-23382774
CVE-2026-47769APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready ...2026-07-232026-07-23382771
CVE-2026-47743Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Liv ...2026-07-232026-07-23382777
CVE-2026-47668DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON scrip ...2026-07-232026-07-23382773
CVE-2026-44210Kata Containers is an open source project focusing on a standard implementation of lightweight V ...2026-07-232026-07-23382772
CVE-2026-65763Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper v ...2026-07-232026-07-23382770
CVE-2026-65762Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 - Impro ...2026-07-232026-07-23382769
CVE-2026-65702Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore p ...2026-07-232026-07-23382763
CVE-2026-65701SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerabil ...2026-07-232026-07-23382765
CVE-2026-65700h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API ...2026-07-232026-07-23382764
CVE-2026-65699AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerabilit ...2026-07-232026-07-23382767
CVE-2026-47755ITFlow provides an IT documentation, ticketing and accounting system for small managed service p ...2026-07-232026-07-23382766
CVE-2026-47752Tugtainer is a self-hosted app for automating updates of Docker containers. Versions prior to 1. ...2026-07-232026-07-23382768
CVE-2026-16552A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writ ...2026-07-232026-07-23382378
CVE-2026-16473A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame deco ...2026-07-232026-07-23382279
CVE-2026-15714An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. ...2026-07-232026-07-23379001
CVE-2026-15713A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to ...2026-07-232026-07-23379000
CVE-2026-15712A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to ...2026-07-232026-07-23378604
CVE-2026-15711A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library ...2026-07-232026-07-23379182
CVE-2026-15709A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate ex ...2026-07-232026-07-23378998
CVE-2026-16615A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand func ...2026-07-232026-07-23382385
CVE-2026-16517A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archiv ...2026-07-232026-07-23382040
CVE-2026-16560A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a le ...2026-07-232026-07-23382317
CVE-2026-65761Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0- ...2026-07-232026-07-23382757
CVE-2026-65760Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in ...2026-07-232026-07-23382755
CVE-2026-65759Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extensio ...2026-07-232026-07-23382762
CVE-2026-65698Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools th ...2026-07-232026-07-23382760
CVE-2026-65697Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics ...2026-07-232026-07-23382761
CVE-2026-65696Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerabil ...2026-07-232026-07-23382759
CVE-2026-65695Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document to ...2026-07-232026-07-23382756
CVE-2026-44909Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. ...2026-07-232026-07-23382754
CVE-2026-16768A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that ...2026-07-232026-07-23382758
CVE-2026-65917CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference ...2026-07-232026-07-23382746
CVE-2026-65916CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerabilit ...2026-07-232026-07-23382747
CVE-2026-15617Logto performs principal lookup without normalizing email and identifier strings, enabling princ ...2026-07-232026-07-23382749
CVE-2026-15616Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypas ...2026-07-232026-07-23382753
CVE-2026-15615Logto omits validation of the SAML element, enabling attackers to strip time and audience restr ...2026-07-232026-07-23382750
CVE-2026-15614Logto silently fails to delete IdP-initiated SAML sessions, enabling session replay and reuse wi ...2026-07-232026-07-23382752
CVE-2026-15612Logto bypasses OIDC nonce validation when the nonce claim is absent from the id_token, enabling ...2026-07-232026-07-23382751
CVE-2026-15611Logto allows unverified email-based SSO account linking, enabling an attacker to register an ide ...2026-07-232026-07-23382748
CVE-2026-48539GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsigh ...2026-07-232026-07-23382745
CVE-2026-48538GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default im ...2026-07-232026-07-23382744
CVE-2026-48537GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archi ...2026-07-232026-07-23382743
CVE-2026-48536GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Se ...2026-07-232026-07-23382742
CVE-2026-48535GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home ...2026-07-232026-07-23382741
CVE-2026-48534GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Serve ...2026-07-232026-07-23382740
CVE-2026-48533This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.2026-07-232026-07-23
 
CVE-2026-48532GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Histo ...2026-07-232026-07-23382739
CVE-2026-48531GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention ...2026-07-232026-07-23382738
CVE-2026-48530GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Classifica ...2026-07-232026-07-23382737
CVE-2026-16584Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 ...2026-07-232026-07-23382735
CVE-2026-11804Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Fra ...2026-07-232026-07-23382736
CVE-2026-43823When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is doub ...2026-07-232026-07-23382730
CVE-2026-43820NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SA ...2026-07-232026-07-23382731
CVE-2026-46600Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the m ...2026-07-232026-07-23381034
CVE-2026-47667CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, ...2026-07-232026-07-23381048
CVE-2026-47143Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointe ...2026-07-232026-07-23381071
CVE-2026-8287Allocation of resources without limits or throttling vulnerability in BizimHesap Information Sys ...2026-07-232026-07-23382725
CVE-2026-65690Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vu ...2026-07-232026-07-23382729
CVE-2026-65689Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vu ...2026-07-232026-07-23382728
CVE-2026-65688Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vu ...2026-07-232026-07-23382727
CVE-2026-65687Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vu ...2026-07-232026-07-23382726
CVE-2026-16735A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. Th ...2026-07-232026-07-23382479
CVE-2026-16733A weakness has been identified in bahmutov find-cypress-specs up to 1.54.12. The impacted elemen ...2026-07-232026-07-23382478
CVE-2026-65914DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted i ...2026-07-232026-07-23382599
CVE-2026-65913DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USE_PROFILES mode that al ...2026-07-232026-07-23382598
CVE-2026-65912DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADD_ATTR is provided ...2026-07-232026-07-23382597
CVE-2026-65911In DOMPurify through 3.3.3, function predicates supplied via ADD_ATTR or ADD_TAGS to DOMPurify.s ...2026-07-232026-07-23382596
CVE-2026-65904DOMPurify through 3.3.3 fails to sanitize DOM elements passed via IN_PLACE mode when the element ...2026-07-232026-07-23382595
CVE-2026-65903DOMPurify before 3.4.0 contains a logic error in the ADD_TAGS function where short-circuit evalu ...2026-07-232026-07-23382592
CVE-2026-65902DOMPurify before 3.4.7 (affected versions = 3.4.5) passes direct references to the module-level ...2026-07-232026-07-23382733
CVE-2026-65901DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in IN_PLACE mode that trus ...2026-07-232026-07-23382594
CVE-2026-65900DOMPurify versions =3.0.0 and before 3.4.8, when configured with SAFE_FOR_TEMPLATES together wi ...2026-07-232026-07-23382591
CVE-2026-65899DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig() ...2026-07-232026-07-23382590
CVE-2026-65898DOMPurify before 3.4.11 fails to clone the ALLOWED_ATTR allowlist when setConfig() is used with ...2026-07-232026-07-23382593
CVE-2026-14257brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expa ...2026-07-232026-07-23382589
CVE-2026-65908In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python execu ...2026-07-232026-07-23382572
CVE-2026-65907In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible2026-07-232026-07-23382577
CVE-2026-65906In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape w ...2026-07-232026-07-23382578
CVE-2026-15037Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instructio ...2026-07-232026-07-23382573
CVE-2026-65897Grav API Plugin versions before 1.0.10 fail to validate the groups field in InvitationsControlle ...2026-07-232026-07-23382576
CVE-2026-65896Grav API Plugin (Composer package getgrav/grav-plugin-api) before 1.0.10 fails to properly valid ...2026-07-232026-07-23382575
CVE-2026-65895Grav API Plugin versions before 1.0.10 fail to restrict write access to security-critical plugin ...2026-07-232026-07-23382574
CVE-2026-65608Grav versions = 1.7.0 and before 2.0.9 contain a remote code execution vulnerability. FlexDirec ...2026-07-232026-07-23382571
CVE-2026-65607SiYuan before v3.7.2 contains a path traversal vulnerability in the /export/temp/ short-circuit ...2026-07-232026-07-23382570
CVE-2026-65550Shop Manager Cross Site Scripting (XSS) in Tabs = 2.5 versions.2026-07-232026-07-23382724
CVE-2026-65540Unauthenticated Cross Site Request Forgery (CSRF) in Popup for CF7 with Sweet Alert = 1.6.5 ver ...2026-07-232026-07-23382723
CVE-2026-65539Unauthenticated Cross Site Request Forgery (CSRF) in Kwayy HTML Sitemap = 4.0 versions.2026-07-232026-07-23382721
CVE-2026-65538Author Cross Site Scripting (XSS) in Machete = 5.2 versions.2026-07-232026-07-23382722
CVE-2026-65537Subscriber Broken Access Control in Cyr to Lat reloaded transliteration of links and file name ...2026-07-232026-07-23382716
CVE-2026-65536Unauthenticated Cross Site Request Forgery (CSRF) in افزونه ح� ل و نقل ووکا� ...2026-07-232026-07-23382720
CVE-2026-65535Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions.2026-07-232026-07-23382715
CVE-2026-65534Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel = 1.1.1 versions.2026-07-232026-07-23382719
CVE-2026-65533Contributor Cross Site Scripting (XSS) in Smart SEO Tool = 4.1.2 versions.2026-07-232026-07-23382718
CVE-2026-65532Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions.2026-07-232026-07-23382710
CVE-2026-65531Unauthenticated Broken Access Control in Qubely = 1.8.14 versions.2026-07-232026-07-23382714
CVE-2026-65530Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions.2026-07-232026-07-23382713
CVE-2026-65529Unauthenticated Broken Access Control in Graphina = 3.1.12 versions.2026-07-232026-07-23382712
CVE-2026-65528Contributor Cross Site Scripting (XSS) in BSK PDF Manager = 3.8 versions.2026-07-232026-07-23382717
CVE-2026-65527Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON = 1.2.5 versions.2026-07-232026-07-23382689
CVE-2026-65526Contributor SQL Injection in Visualizer = 4.0.6 versions.2026-07-232026-07-23382625
CVE-2026-65525Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions.2026-07-232026-07-23382623
CVE-2026-65524Contributor Broken Access Control in Avada Custom Branding = 1.2 versions.2026-07-232026-07-23382624
CVE-2026-65522Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base Education Wor ...2026-07-232026-07-23382622
CVE-2026-65521Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions.2026-07-232026-07-23382621
CVE-2026-65519Author Cross Site Scripting (XSS) in Photo Gallery = 2.7.7.29 versions.2026-07-232026-07-23382688
CVE-2026-65518Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal Stripe = 1.5.5 versions.2026-07-232026-07-23382687
CVE-2026-65516Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice = 2.2.6 versions.2026-07-232026-07-23382677
CVE-2026-65514Contributor Cross Site Scripting (XSS) in Appointment Hour Booking = 1.5.86 versions.2026-07-232026-07-23382686
CVE-2026-65512Unauthenticated Cross Site Request Forgery (CSRF) in WP Activity Log = 5.6.4 versions.2026-07-232026-07-23382685
CVE-2026-65511Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base Education ...2026-07-232026-07-23382619
CVE-2026-65510Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice = 2.2.6 versions.2026-07-232026-07-23382684
CVE-2026-65506Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio Podcast by Sonaar ...2026-07-232026-07-23382618
CVE-2026-65505Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions.2026-07-232026-07-23382676
CVE-2026-65503Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons = 3.0.5 versions.2026-07-232026-07-23382711
CVE-2026-65501Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce = 5.1.0 ...2026-07-232026-07-23382617
CVE-2026-65500Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base Education Word ...2026-07-232026-07-23382611
CVE-2026-65499Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions.2026-07-232026-07-23382675
CVE-2026-65498Unauthenticated Sensitive Data Exposure in Complianz = 7.5.0 versions.2026-07-232026-07-23382673
CVE-2026-65497Administrator PHP Object Injection in Complianz = 7.5.0 versions.2026-07-232026-07-23382610
CVE-2026-65496Author Server Side Request Forgery (SSRF) in Complianz = 7.5.0 versions.2026-07-232026-07-23382682
CVE-2026-65495Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions.2026-07-232026-07-23382674
CVE-2026-65494Subscriber SQL Injection in Dokan Pro = 5.0.2 versions.2026-07-232026-07-23382672
CVE-2026-65493Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions.2026-07-232026-07-23382609
CVE-2026-65492Unauthenticated Cross Site Scripting (XSS) in Dokan Pro = 5.0.0 versions.2026-07-232026-07-23382709
CVE-2026-65491Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions.2026-07-232026-07-23382671
CVE-2026-65490Unauthenticated Sensitive Data Exposure in Create by Mediavine = 2.5.3 versions.2026-07-232026-07-23382670
CVE-2026-65489Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions.2026-07-232026-07-23382668
CVE-2026-65488Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element Kit for Elementor = 1.6. ...2026-07-232026-07-23382708
CVE-2026-65487Unauthenticated Broken Access Control in Photography = 7.7.6 versions.2026-07-232026-07-23382669
CVE-2026-65486Unauthenticated Broken Access Control in Event post = 6.0.1 versions.2026-07-232026-07-23382667
CVE-2026-65485Unauthenticated Broken Access Control in Content Control = 2.6.5 versions.2026-07-232026-07-23382666
CVE-2026-65484Contributor Broken Access Control in Style Kits = 2.6.5 versions.2026-07-232026-07-23382665
CVE-2026-65483Author Cross Site Scripting (XSS) in HashThemes Demo Importer = 1.4.2 versions.2026-07-232026-07-23382707
CVE-2026-65482Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor = 1.6.2 versions.2026-07-232026-07-23382706
CVE-2026-65481Contributor Local File Inclusion in Vino = 1.9 versions.2026-07-232026-07-23382681
CVE-2026-65480Contributor Cross Site Scripting (XSS) in TheGem = 5.11.1 versions.2026-07-232026-07-23382705
CVE-2026-65479Subscriber Broken Access Control in Reviewer = 3.14.2 versions.2026-07-232026-07-23382664
CVE-2026-65478Subscriber Broken Access Control in ListingPro = 2.9.10 versions.2026-07-232026-07-23382663
CVE-2026-65477Contributor Local File Inclusion in Tonda Core = 2.1.2 versions.2026-07-232026-07-23382680
CVE-2026-65476Unauthenticated Broken Access Control in Civi = 2.2.4 versions.2026-07-232026-07-23382662
CVE-2026-65474Unauthenticated Sensitive Data Exposure in Ninja Tables = 5.2.10 versions.2026-07-232026-07-23382661
CVE-2026-65473Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit = 4.9.12 versions.2026-07-232026-07-23382704
CVE-2026-65472Unauthenticated Broken Access Control in Kit (formerly ConvertKit) = 3.3.5 versions.2026-07-232026-07-23382659
CVE-2026-65471Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core = 5.15.6 versions.2026-07-232026-07-23382703
CVE-2026-65470Contributor Cross Site Scripting (XSS) in Fluent Support = 2.3.0 versions.2026-07-232026-07-23382701
CVE-2026-65469Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions.2026-07-232026-07-23382658
CVE-2026-65468Unauthenticated Broken Access Control in JetBooking = 4.1.2 versions.2026-07-232026-07-23382656
CVE-2026-65467Contributor Server Side Request Forgery (SSRF) in JetEngine = 3.8.11 versions.2026-07-232026-07-23382679
CVE-2026-65466Custom role Server Side Request Forgery (SSRF) in JetBooking = 4.1.2 versions.2026-07-232026-07-23382678
CVE-2026-65465Contributor Cross Site Scripting (XSS) in JetElements For Elementor = 2.9.1.1 versions.2026-07-232026-07-23382702
CVE-2026-65464Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP = 4.16.3 versions.2026-07-232026-07-23382699
CVE-2026-65463Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS = 2.3.1 versions.2026-07-232026-07-23382657
CVE-2026-65462Administrator SQL Injection in Uncanny Automator = 7.3.2 versions.2026-07-232026-07-23382655
CVE-2026-65461Administrator Arbitrary File Upload in Really Simple CSV Importer = 1.3 versions.2026-07-232026-07-23382654
CVE-2026-65460Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway = 5.1.0 versions.2026-07-232026-07-23382700
CVE-2026-65458Contributor Sensitive Data Exposure in Polylang = 3.8.5 versions.2026-07-232026-07-23382653
CVE-2026-65457Subscriber Broken Access Control in ЮKassa для WooCommerce = 2.16.1 versions.2026-07-232026-07-23382616
CVE-2026-65456Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce = 1.13.6 ...2026-07-232026-07-23382615
CVE-2026-65455Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions.2026-07-232026-07-23382652
CVE-2026-65454Contributor SQL Injection in Quiz And Survey Master = 11.2.0 versions.2026-07-232026-07-23382651
CVE-2026-65453Unauthenticated Broken Access Control in Ebook Store = 6.19 versions.2026-07-232026-07-23382650
CVE-2026-65452Unauthenticated Broken Access Control in Ebook Store = 6.19 versions.2026-07-232026-07-23382649
CVE-2026-65451Contributor SQL Injection in MapSVG = 8.14.0 versions.2026-07-232026-07-23382647
CVE-2026-65450Contributor SQL Injection in MapSVG = 8.14.0 versions.2026-07-232026-07-23382648
CVE-2026-65449Contributor Cross Site Scripting (XSS) in MapSVG = 8.14.0 versions.2026-07-232026-07-23382697
CVE-2026-61981Unauthenticated Cross Site Request Forgery (CSRF) in Simple Link Directory Pro = 15.0.8 versions.2026-07-232026-07-23382698
CVE-2026-61973Subscriber Broken Access Control in ShopLentor Pro = 2.8.5 versions.2026-07-232026-07-23382646
CVE-2026-61972Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions.2026-07-232026-07-23382645
CVE-2026-61954Unauthenticated Broken Access Control in PayU India = 3.8.9 versions.2026-07-232026-07-23382644
CVE-2026-61951Unauthenticated Privilege Escalation in TrueBooker = 1.2.3 versions.2026-07-232026-07-23382643
CVE-2026-61950Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions.2026-07-232026-07-23382642
CVE-2026-61949Unauthenticated SQL Injection in Bookly = 27.7 versions.2026-07-232026-07-23382641
CVE-2026-61948Unauthenticated SQL Injection in WPDM Premium Packages = 6.2.0 versions.2026-07-232026-07-23382640
CVE-2026-61947Unauthenticated Cross Site Scripting (XSS) in Form Vibes Database Manager for Forms = 1.5.2 v ...2026-07-232026-07-23382695
CVE-2026-61946Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments = 3.12.27 versions.2026-07-232026-07-23382639
CVE-2026-61944Unauthenticated Cross Site Scripting (XSS) in Bookly = 27.7 versions.2026-07-232026-07-23382696
CVE-2026-61943Unauthenticated Broken Access Control in WPDM Premium Packages = 6.2.0 versions.2026-07-232026-07-23382638
CVE-2026-59555Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions.2026-07-232026-07-23382636
CVE-2026-59554Unauthenticated Broken Authentication in Ziina = 1.2.21 versions.2026-07-232026-07-23382635
CVE-2026-59547Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce = 9.1.4 vers ...2026-07-232026-07-23382614
CVE-2026-59545Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions.2026-07-232026-07-23382613
CVE-2026-59544Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions.2026-07-232026-07-23382608
CVE-2026-59543Subscriber Remote Code Execution (RCE) in Advanced Views = 3.8.11 versions.2026-07-232026-07-23382612
CVE-2026-59542Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions.2026-07-232026-07-23382634
CVE-2026-59541Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions.2026-07-232026-07-23382633
CVE-2026-59540Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions.2026-07-232026-07-23382632
CVE-2026-59526Unauthenticated SQL Injection in MapSVG = 8.14.0 versions.2026-07-232026-07-23382631
CVE-2026-59525Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions.2026-07-232026-07-23382630
CVE-2026-59524Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions.2026-07-232026-07-23382628
CVE-2026-59522Subscriber Broken Access Control in WP ERP = 1.17.5 versions.2026-07-232026-07-23382627
CVE-2026-59517Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder = 4.0.12 versions.2026-07-232026-07-23382694
CVE-2026-59514Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions.2026-07-232026-07-23382626
CVE-2026-59513Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS = 2.3.0 versions.2026-07-232026-07-23382693
CVE-2026-59512Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce = 2.2.34.43 versions.2026-07-232026-07-23382683
CVE-2026-57809Unauthenticated Cross Site Scripting (XSS) in AffiliateWP = 2.34.0 versions.2026-07-232026-07-23382692
CVE-2026-57808Subscriber Arbitrary Content Deletion in WP EasyPay = 4.5.0 versions.2026-07-232026-07-23382734
CVE-2026-57785Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing = 1.2.63 versions.2026-07-232026-07-23382691
CVE-2026-57784Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension = 3.3. ...2026-07-232026-07-23382690
CVE-2026-57769Unauthenticated Cross Site Scripting (XSS) in Grand Photography = 5.7.8 versions.2026-07-232026-07-23382607
CVE-2026-57767Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro = 10.1.02 versions.2026-07-232026-07-23382603
CVE-2026-57735Unauthenticated Cross Site Scripting (XSS) in Breakdance = 2.7.1 versions.2026-07-232026-07-23382606
CVE-2026-57717Unauthenticated Broken Access Control in Knit Pay = 9.6.0.0 versions.2026-07-232026-07-23382602
CVE-2026-57716Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions.2026-07-232026-07-23382601
CVE-2026-57704Unauthenticated Cross Site Scripting (XSS) in Smart Manager = 8.90.0 versions.2026-07-232026-07-23382605
CVE-2026-57703Subscriber Broken Access Control in Sunshine Photo Cart = 3.6.10.1 versions.2026-07-232026-07-23382600
CVE-2026-57701Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro = 12.8.5 versions.2026-07-232026-07-23382604
CVE-2026-57699Subscriber Cross Site Scripting (XSS) in Slider Pro = 4.8.13 versions.2026-07-232026-07-23382588
CVE-2026-57696Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions.2026-07-232026-07-23382732
CVE-2026-57428Unauthenticated Cross Site Scripting (XSS) in Sprout Clients = 3.2.3 versions.2026-07-232026-07-23382587
CVE-2026-57427Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock = 1.0.4 versions.2026-07-232026-07-23382586
CVE-2026-57425Unauthenticated Broken Access Control in Autopay dla WooCommerce = 2.2.27 versions.2026-07-232026-07-23382580
CVE-2026-57397Unauthenticated Cross Site Scripting (XSS) in Coaching = 3.9.2 versions.2026-07-232026-07-23382585
CVE-2026-57384Subscriber Cross Site Scripting (XSS) in WishList Member X = 3.32.0 versions.2026-07-232026-07-23382584
CVE-2026-57374Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions.2026-07-232026-07-23382583
CVE-2026-57373Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions.2026-07-232026-07-23382582
CVE-2026-57370Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro = 11.9.1 ...2026-07-232026-07-23382581
CVE-2026-57367Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions.2026-07-232026-07-23382579
CVE-2026-65606SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol han ...2026-07-232026-07-23382566
CVE-2026-65605SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View (dat ...2026-07-232026-07-23382561
CVE-2026-65475Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') v ...2026-07-232026-07-23382569
CVE-2026-64815In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer f ...2026-07-232026-07-23382568
CVE-2026-64814In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Devel ...2026-07-232026-07-23382565
CVE-2026-64813In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Re ...2026-07-232026-07-23382564
CVE-2026-64812In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote D ...2026-07-232026-07-23382563
CVE-2026-64811In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting p ...2026-07-232026-07-23382562
CVE-2026-64810In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, all ...2026-07-232026-07-23382567
CVE-2026-64809In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting projec ...2026-07-232026-07-23382560
CVE-2026-64808In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting projec ...2026-07-232026-07-23382550
CVE-2026-64807In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied ...2026-07-232026-07-23382555
CVE-2026-64806In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting projec ...2026-07-232026-07-23382554
CVE-2026-64805In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting projec ...2026-07-232026-07-23382558
CVE-2026-64804In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting projec ...2026-07-232026-07-23382557
CVE-2026-64803In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project ...2026-07-232026-07-23382553
CVE-2026-64802In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project ...2026-07-232026-07-23382552
CVE-2026-64800In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default2026-07-232026-07-23382556
CVE-2026-61945Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mult ...2026-07-232026-07-23382551
CVE-2026-57626Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. T ...2026-07-232026-07-23382559
CVE-2026-27423Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions.2026-07-232026-07-23382548
CVE-2026-27422Unauthenticated Broken Access Control in YT Player = 2.0.9 versions.2026-07-232026-07-23382547
CVE-2026-27418Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions.2026-07-232026-07-23382546
CVE-2026-27403Contributor Cross Site Scripting (XSS) in Hubbub Lite = 1.36.3 versions.2026-07-232026-07-23382549
CVE-2026-27399Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions.2026-07-232026-07-23382545
CVE-2026-27392Contributor Broken Access Control in uListing = 2.2.0 versions.2026-07-232026-07-23382544
CVE-2026-27391Subscriber Broken Access Control in uListing = 2.2.0 versions.2026-07-232026-07-23382543
CVE-2026-27377Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress = ...2026-07-232026-07-23382540
CVE-2026-27372Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions.2026-07-232026-07-23382542
CVE-2026-27355Unauthenticated Broken Access Control in Ditty = 3.1.66 versions.2026-07-232026-07-23382541
CVE-2026-27064Editor Arbitrary File Upload in Mailster = 4.1.17 versions.2026-07-232026-07-23382535
CVE-2026-25466Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions.2026-07-232026-07-23382534
CVE-2026-25427Subscriber Broken Access Control in eRoom = 1.7.1 versions.2026-07-232026-07-23382533
CVE-2026-25424Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions.2026-07-232026-07-23382532
CVE-2026-25405Contributor SQL Injection in eRoom = 1.7.1 versions.2026-07-232026-07-23382531
CVE-2026-24639Author Server Side Request Forgery (SSRF) in Photo Block = 1.7.1 versions.2026-07-232026-07-23382536
CVE-2026-24628Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic = 1.16.3 versions.2026-07-232026-07-23382539
CVE-2026-24552Contributor SQL Injection in Create by Mediavine = 2.5.3 versions.2026-07-232026-07-23382530
CVE-2026-24537Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) = 0.6.6 vers ...2026-07-232026-07-23382538
CVE-2026-43660A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18 ...2026-07-232026-07-23362860
CVE-2026-43658The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 2 ...2026-07-232026-07-23362859
CVE-2026-28958This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS ...2026-07-232026-07-23362845
CVE-2026-28955The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 1 ...2026-07-232026-07-23362821
CVE-2026-28953The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 1 ...2026-07-232026-07-23362819
CVE-2026-28947A use-after-free issue was addressed with improved memory management. This issue is fixed in Saf ...2026-07-232026-07-23362818
CVE-2026-28946A use-after-free issue was addressed with improved memory management. This issue is fixed in Saf ...2026-07-232026-07-23362817
CVE-2026-28942A use-after-free issue was addressed with improved memory management. This issue is fixed in Saf ...2026-07-232026-07-23362815
CVE-2026-28907The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS ...2026-07-232026-07-23362799
CVE-2026-28905The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 2 ...2026-07-232026-07-23362809
CVE-2026-28904The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 1 ...2026-07-232026-07-23362808
CVE-2026-28903The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 1 ...2026-07-232026-07-23362807
CVE-2026-28902The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 2 ...2026-07-232026-07-23362806
CVE-2026-28901The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 2 ...2026-07-232026-07-23362805
CVE-2026-28883A use-after-free issue was addressed with improved memory management. This issue is fixed in Saf ...2026-07-232026-07-23362804
CVE-2026-28847The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 1 ...2026-07-232026-07-23362783
CVE-2026-47062Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381185
CVE-2026-47055Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381184
CVE-2026-47054Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381178
CVE-2026-47053Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381190
CVE-2026-47050Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381194
CVE-2026-47047Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381183
CVE-2026-47044Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381188
CVE-2026-47043Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381192
CVE-2026-47041Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381187
CVE-2026-47064Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Opt ...2026-07-232026-07-23381166
CVE-2026-47052Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). S ...2026-07-232026-07-23382265
CVE-2026-47023Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Rep ...2026-07-232026-07-23381173
CVE-2026-47012Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Opt ...2026-07-232026-07-23381172
CVE-2026-47008Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). S ...2026-07-232026-07-23381169
CVE-2026-46936Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL ...2026-07-232026-07-23381107
CVE-2026-64611A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infini ...2026-07-232026-07-23382529
CVE-2026-16745A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Du ...2026-07-232026-07-23382528
CVE-2026-65758The front-end Submissions view did not enforce access control. An unauthenticated visitor could ...2026-07-232026-07-23382527
CVE-2026-15786The WP Encryption One Click Free SSL Certificate SSL / HTTPS Redirect, Security SSL Scan p ...2026-07-232026-07-23382519
CVE-2026-15448The Tickera Sell Tickets Manage Events plugin for WordPress is vulnerable to generic SQL Inj ...2026-07-232026-07-23382525
CVE-2026-15394The Header Footer Script Adder Insert Code in Header, Body Footer plugin for WordPress is vu ...2026-07-232026-07-23382526
CVE-2026-15348The Premium Packages Sell Digital Products Securely plugin for WordPress is vulnerable to Auth ...2026-07-232026-07-23382524
CVE-2026-15017The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all vers ...2026-07-232026-07-23382523
CVE-2026-15015The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization ...2026-07-232026-07-23382522
CVE-2026-13119The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection vi ...2026-07-232026-07-23382521
CVE-2026-13009The AI Copilot Content Generator plugin for WordPress is vulnerable to generic SQL Injection v ...2026-07-232026-07-23382520
CVE-2026-65757The editor popup could expose restricted module data to authenticated users without the required ...2026-07-232026-07-23382517
CVE-2026-65756Shortcut configuration accepted arbitrary inline JavaScript.2026-07-232026-07-23382516
CVE-2026-65755Date-sensitive query cache keys did not retain a bounded time component. Cached results could re ...2026-07-232026-07-23382513
CVE-2026-65754ReReplacer XML include paths could read files outside the site directory.2026-07-232026-07-23382515
CVE-2026-65713Modals gallery paths could enumerate unintended directories.2026-07-232026-07-23382514
CVE-2026-65712CDN versioning could check file paths outside the site directory, exposing local file existence ...2026-07-232026-07-23382518
CVE-2026-65431Geo IP database update archives have been broadly extracted without path validation, leading to ...2026-07-232026-07-23382512
CVE-2026-65430MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability.2026-07-232026-07-23382511
CVE-2026-64876Database-update requests lacked consistent token and Super User checks, this could cause unautho ...2026-07-232026-07-23382510
CVE-2026-64875GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.2026-07-232026-07-23382509
CVE-2026-64874CDN credentials were exposed in administrator request URLs.2026-07-232026-07-23382508
CVE-2026-64873Custom query URLs could access internal or reserved network services.2026-07-232026-07-23382507
CVE-2026-64872Custom purge and log paths could escape the site webroot directory.2026-07-232026-07-23382505
CVE-2026-64871Administrator URL purges did not consistently require a valid token and cache-management permission.2026-07-232026-07-23382506
CVE-2026-64799Content-controlled image URLs could request private or reserved network services, follow unsafe ...2026-07-232026-07-23382504
CVE-2026-16078The WCPOS Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Dir ...2026-07-232026-07-23382503
CVE-2026-15906The Premium Packages Sell Digital Products Securely plugin for WordPress is vulnerable to gene ...2026-07-232026-07-23382497
CVE-2026-15827The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a m ...2026-07-232026-07-23382496
CVE-2026-15794The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scrip ...2026-07-232026-07-23382500
CVE-2026-15761The Tickera Sell Tickets Manage Events plugin for WordPress is vulnerable to generic SQL Inj ...2026-07-232026-07-23382495
CVE-2026-15647The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...2026-07-232026-07-23382499
CVE-2026-15646The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...2026-07-232026-07-23382498
CVE-2026-15404The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in ...2026-07-232026-07-23382502
CVE-2026-15011The Customer Support Ticket System Helpdesk plugin for WordPress is vulnerable to Code Injecti ...2026-07-232026-07-23382493
CVE-2026-14481The Equalize Digital Accessibility Checker WCAG, ADA, EAA and Section 508 compliance plugin fo ...2026-07-232026-07-23382501
CVE-2026-14282The GoDAM Organize WordPress Media Library File Manager with Unlimited Folders for Images, V ...2026-07-232026-07-23382494
CVE-2026-56820Netty is a network application framework for development of protocol servers and clients. In ver ...2026-07-232026-07-23382029
CVE-2026-56819Netty is a network application framework for development of protocol servers and clients. In ver ...2026-07-232026-07-23382028
CVE-2026-56817Netty is a network application framework for development of protocol servers and clients. In ver ...2026-07-232026-07-23382030
CVE-2026-56816Netty is a network application framework for development of protocol servers and clients. Prior ...2026-07-232026-07-23381515
CVE-2026-56746Netty is a network application framework for development of protocol servers and clients. Versio ...2026-07-232026-07-23381513
CVE-2026-56745Netty is a network application framework for development of protocol servers and clients. In ver ...2026-07-232026-07-23381297
CVE-2026-55851Netty is a network application framework for development of protocol servers and clients. In ver ...2026-07-232026-07-23381301
CVE-2026-56852A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.2026-07-232026-07-23381035
CVE-2026-53910diff3\u00a0tool from GNU diffutils\u00a0is vulnerable to a heap\u2011based buffer overflow due t ...2026-07-232026-07-23382344
CVE-2026-52688RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation2026-07-232026-07-23382491
CVE-2026-52686The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are ...2026-07-232026-07-23382488
CVE-2026-52684If the auth responds very slowly and the records expire in between, the capping of TTLs is not e ...2026-07-232026-07-23382487
CVE-2026-16723A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulne ...2026-07-232026-07-23382486
CVE-2026-16287Improper neutralization of special elements used in an OS command ('OS command injection&#0 ...2026-07-232026-07-23382489
CVE-2026-9729The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scriptin ...2026-07-232026-07-23382485
CVE-2026-9713The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection ...2026-07-232026-07-23382480
CVE-2026-9635The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scriptin ...2026-07-232026-07-23382484
CVE-2026-59678An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount ...2026-07-232026-07-23382482
CVE-2026-59677A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that i ...2026-07-232026-07-23382481
CVE-2026-12421The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password ...2026-07-232026-07-23382483
CVE-2026-9577The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the `mod` ...2026-07-232026-07-23382473
CVE-2026-9066The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query paramete ...2026-07-232026-07-23382477
CVE-2026-59676A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policy ...2026-07-232026-07-23382476
CVE-2026-14291The security-ninja-premium WordPress plugin before 5.290 does not verify the second authenticati ...2026-07-232026-07-23382474
CVE-2026-12082The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on severa ...2026-07-232026-07-23382475
CVE-2026-7534The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site S ...2026-07-232026-07-23382472
CVE-2026-7232The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '[p ...2026-07-232026-07-23382469
CVE-2026-64600In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork ...2026-07-232026-07-23382470
CVE-2026-63226Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement rest ...2026-07-232026-07-23382471
CVE-2026-56444In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 's ...2026-07-232026-07-23382354
CVE-2026-56416In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonica ...2026-07-232026-07-23382355
CVE-2026-55991In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can tri ...2026-07-232026-07-23382352
CVE-2026-55990In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause li ...2026-07-232026-07-23382351
CVE-2026-55973In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes&#03 ...2026-07-232026-07-23382348
CVE-2026-55717In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is ...2026-07-232026-07-23382329
CVE-2026-55708In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and &#03 ...2026-07-232026-07-23382333
CVE-2026-54478In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-p ...2026-07-232026-07-23382328
CVE-2026-52863In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' ...2026-07-232026-07-23382332
CVE-2026-50252In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and inten ...2026-07-232026-07-23382325
CVE-2026-50251In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold&#0 ...2026-07-232026-07-23382324
CVE-2026-50248In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured p ...2026-07-232026-07-23382331
CVE-2026-50243In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the &#03 ...2026-07-232026-07-23382327
CVE-2026-50046In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-T ...2026-07-232026-07-23382330
CVE-2026-50045In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nest ...2026-07-232026-07-23382326
CVE-2026-46582In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another ...2026-07-232026-07-23382318
CVE-2026-44690In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Lab ...2026-07-232026-07-23382316
CVE-2026-44687In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is ...2026-07-232026-07-23382323
CVE-2026-44621With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and co ...2026-07-232026-07-23382322
CVE-2026-42955In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-202 ...2026-07-232026-07-23382321
CVE-2026-41637In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) q ...2026-07-232026-07-23382315
CVE-2026-40691In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the rou ...2026-07-232026-07-23382320
CVE-2026-32665In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is ...2026-07-232026-07-23382314
CVE-2026-14586In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with hig ...2026-07-232026-07-23382319
CVE-2026-48029libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have ...2026-07-232026-07-23382367
CVE-2026-64835FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the AD ...2026-07-232026-07-23382391
CVE-2026-64834FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxe ...2026-07-232026-07-23382390
CVE-2026-64833FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF mu ...2026-07-232026-07-23382393
CVE-2026-64832FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardwa ...2026-07-232026-07-23382392
CVE-2026-64831FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan H ...2026-07-232026-07-23382388
CVE-2026-64830FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub su ...2026-07-232026-07-23382389
CVE-2026-13321The BIND resolver accepts validly-signed NSEC records where the \ Next Domain Name\ field point ...2026-07-232026-07-23382364
CVE-2026-13204If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and the ...2026-07-232026-07-23382363
CVE-2026-12617The issue is unexpected program termination based on ordering and/or specific content in respons ...2026-07-232026-07-23382362
CVE-2026-11721It is possible for an attacker's zone to respond to a query with an RRSIG that has a smalle ...2026-07-232026-07-23382359
CVE-2026-11622A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zon ...2026-07-232026-07-23382358
CVE-2026-11605The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always ...2026-07-232026-07-23382357
CVE-2026-11331An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can cra ...2026-07-232026-07-23382356
CVE-2026-10822If BIND encounters a particular invalid data structure in a DNS record, it will accept the inval ...2026-07-232026-07-23382361
CVE-2026-10723BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to fo ...2026-07-232026-07-23382360
CVE-2026-6390A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multi ...2026-07-232026-07-23382468
CVE-2026-7120@fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate ...2026-07-232026-07-23382467
CVE-2026-15074@fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in requ ...2026-07-232026-07-23382466
CVE-2026-21723The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test ...2026-07-232026-07-23382465
CVE-2026-16653A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the functio ...2026-07-232026-07-23382396
CVE-2026-60162Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381288
CVE-2026-60161Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381295
CVE-2026-60160Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381294
CVE-2026-60159Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381276
CVE-2026-60158Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381287
CVE-2026-60155Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381274
CVE-2026-60150Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...2026-07-232026-07-23381273
CVE-2026-61144Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Opt ...2026-07-232026-07-23382048
CVE-2026-61128Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Opt ...2026-07-232026-07-23381991
CVE-2026-61109Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSO ...2026-07-232026-07-23381988
CVE-2026-61108Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS ...2026-07-232026-07-23381989
CVE-2026-61096Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Plu ...2026-07-232026-07-23382001
CVE-2026-61094Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Rep ...2026-07-232026-07-23381979
CVE-2026-61093Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Opt ...2026-07-232026-07-23381984
CVE-2026-61081Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Per ...2026-07-232026-07-23381997
CVE-2026-60747Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Rep ...2026-07-232026-07-23381809
CVE-2026-60718Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSO ...2026-07-232026-07-23381799
CVE-2026-60585Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Rep ...2026-07-232026-07-23381700
CVE-2026-60332Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Gro ...2026-07-232026-07-23381503
CVE-2026-60331Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Rep ...2026-07-232026-07-23381501
CVE-2026-60324Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Opt ...2026-07-232026-07-23381373
CVE-2026-60316Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X P ...2026-07-232026-07-23381374

2025

CVE描述提交管理条目
CVE-2025-71408NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in ...2026-07-242026-07-24383021
CVE-2025-9205The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up ...2026-07-242026-07-24382852
CVE-2025-71389Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution bec ...2026-07-232026-07-23382820
CVE-2025-68081Administrator Cross Site Scripting (XSS) in WP-Polls = 2.77.3 versions.2026-07-232026-07-23382537

2024

CVE描述提交管理条目
CVE-2024-14040In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weigh ...2026-07-262026-07-26383325
CVE-2024-58355Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerabi ...2026-07-232026-07-23382824
CVE-2024-58354cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerab ...2026-07-232026-07-23382819
CVE-2024-58353Cal.com (repository calcom/cal.diy) in versions ). Booking question (form field) labels are rend ...2026-07-232026-07-23382825
CVE-2024-58330A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthe ...2026-07-232026-07-23382492
CVE-2024-58023Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to ...2026-07-232026-07-23382490

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!