CVEs published June 1, 2026
377 CVEs were published on June 1, 2026: 21 critical, 138 high. 1 is now in CISA KEV.
- Published
- 377
- Critical
- 21
- High
- 138
- Medium
- 197
- Low
- 21
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 119
Most affected products
- Google Android
- 60
- nextcloud security-advisories
- 26
- Qualcomm Snapdragon
- 22
- Apache Software Foundation apache-airflow · Apache Softw… +2
- 9
- kiteworks Secure Data Forms
- 8
- Apache Software Foundation apache-airflow-core · airflow +1
- 7
- SOPlanning
- 7
- SourceCodester Pharmacy Sales and Inventory System
- 6
- Assimp
- 5
- itsourcecode Content Management System
- 5
Critical 21
- CVE-2026-25879Langroid has Prompt to SQL Injection, Leading to RCElangroid
- CVE-2026-40965Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure.Cloud Foundry Foundation uaa_release · Cloud Foundry Founda…
- CVE-2018-25427Arm Whois 3.11 Buffer Overflow via SEH OverwriteArmcode Arm Whois
- CVE-2026-9319IBM WebSphere Application Server is affected by a remote code execution vulnerabilityIBM WebSphere Application Server
- CVE-2026-9311IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
- CVE-2026-8644IBM WebSphere Application Server is affected by an identity spoofing vulnerabilityIBM WebSphere Application Server
- CVE-2026-0072In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check.Google Android XR
- CVE-2026-49121AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle DeserializationROCm aiter
- CVE-2026-45131CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requestsCloudPirates-io helm-charts
- CVE-2026-45132CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handlingCloudPirates-io helm-charts
- CVE-2026-44211Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerabilitycline
- CVE-2026-42672WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerabilityWP Directory Kit
- CVE-2026-0826Poly Voice – Possible Remote Control of Certain Poly DevicesHP poly_trio_8300 · HP poly_trio_8500 +2
- CVE-2026-42680WordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerabilityWasiliy Strecker / ContestGallery developer Contest Gallery…
- CVE-2026-42682WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerabilityTomdever wpForo Forum
- CVE-2026-48866WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerabilityRocketgenius Gravity Forms
- CVE-2026-48879WordPress AIWU plugin <= 1.4.17 - Privilege Escalation vulnerabilitySergey AIWU
- CVE-2026-8931Critical RCE vulnerability in Disig Web SignerDisig Web Signer
- CVE-2026-42252Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user patternApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-7858Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and…Dassault Systèmes Teamwork Cloud - Standard Edition · Da… +3
- CVE-2026-48188SQL Injection via MySQL Quote MethodOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
High 138
- CVE-2026-25277Buffer Copy Without Checking Size of Input in Secure ProcessorQualcomm Snapdragon
- CVE-2026-25276Improper Validation of Array Index in Secure ProcessorQualcomm Snapdragon
- CVE-2026-25260Time-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceQualcomm Snapdragon
- CVE-2026-25259Out-of-bounds Write in DSP ServiceQualcomm Snapdragon
- CVE-2026-25258Out-of-bounds Read in DSP ServiceQualcomm Snapdragon
- CVE-2026-24092Improper Validation of Syntactic Correctness of Input in DisplayQualcomm Snapdragon
- CVE-2026-24091Improper Validation of Syntactic Correctness of Input in DisplayQualcomm Snapdragon
- CVE-2026-24090Missing Authentication for Critical Function in HLOSQualcomm Snapdragon
- CVE-2026-24089Improper Validation of Syntactic Correctness of Input in KernelQualcomm Snapdragon
- CVE-2026-24088Missing Authentication for Critical Function in BootQualcomm Snapdragon
- CVE-2026-24087Improper Validation of Syntactic Correctness of Input in KernelQualcomm Snapdragon
- CVE-2026-24085Stack-based Buffer Overflow in DisplayQualcomm Snapdragon
- CVE-2025-59606NULL Pointer Dereference in HLOSQualcomm Snapdragon
- CVE-2025-59605Out-of-bounds Write in HLOSQualcomm Snapdragon
- CVE-2025-59604NULL Pointer Dereference in SPS ApplicationsQualcomm Snapdragon
- CVE-2026-24782Kiteworks Secure Data Forms has a SQL Injection vulnerabilitykiteworks Secure Data Forms
- CVE-2026-24752Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks Secure Data Forms
- CVE-2019-25718Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode BypassDräger Infinity Explorer C700
- CVE-2026-10293UTT HiPER 1200GW formFireWall strcpy stack-based overflowUTT HiPER 1200GW
- CVE-2019-25716Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network PacketDräger Infinity Delta · Dräger Infinity Kappa
- CVE-2026-28580In multiple functions of NotificationChannel.java, there is a possible desync in persistence due to an incorrect bounds check.Google Android
- CVE-2026-28577In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Google Android
- CVE-2026-0100In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2026-0099In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in…Google Android
- CVE-2026-0098In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy.Google Android
Show all 138 entriesShow fewer entries
- CVE-2026-0097In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error.Google Android
- CVE-2026-0096In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or…Google Android
- CVE-2026-0095In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process…Google Android
- CVE-2026-0094In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to…Google Android
- CVE-2026-0093In multiple locations, there is a possible misleading UI due to obfuscation.Google Android
- CVE-2026-0091In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user.Google Android
- CVE-2026-0089In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check.Google Android
- CVE-2026-0088In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or…Google Android
- CVE-2026-0087In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a…Google Android
- CVE-2026-0078In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation.Google Android
- CVE-2026-0077In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the…Google Android
- CVE-2026-0076In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2026-0075In multiple functions, there is a possible way to access the contacts database due to a SQL injection.Google Android
- CVE-2026-0059In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow.Google Android
- CVE-2026-0045In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code.Google Android
- CVE-2026-0036In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Google Android
- CVE-2026-0009In multiple locations, there is a possible tapjacking due to a logic error in the code.Google Android
- CVE-2025-48652In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code.Google Android
- CVE-2025-48649In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass.Google Android
- CVE-2025-48595In multiple locations, there is a possible way to achieve code execution due to an integer overflow.Google Android
- CVE-2025-48570In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.Google Android
- CVE-2025-32348In multiple locations, there is a possible background activity launch due to a missing permission check.Google Android
- CVE-2025-26418In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account…Google Android
- CVE-2025-22426In resolveContentProvider of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code.Google Android
- CVE-2025-22424In multiple locations, there is a possible way to reveal images across users due to improper input validation.Google Android
- CVE-2026-40964Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain…Cloud Foundry Foundation log-cache_release · Cloud Foundry…
- CVE-2026-49491Pixa Bank 2.0 SQL Injection via agence-ajax.php APIPixastudio Pixa Bank
- CVE-2018-25434WP AutoSuggest 0.24 SQL Injection via autosuggest.phpeliekhoury WP AutoSuggest
- CVE-2018-25433Joomla JE Photo Gallery 1.1 SQL Injection via categoryidJoomlaextensions JE Photo Gallery
- CVE-2018-25432Arm Whois 3.11 Buffer Overflow via ASLR BypassArmcode Arm Whois
- CVE-2018-25431No-Cms 1.0 SQL Injection via order_by ParametergoFrendiAsgard No-CMS
- CVE-2018-25430Paroiciel 11.20 SQL Injection via eGeqIdEquipe ParameterParoiciel
- CVE-2018-25429Paroiciel 11.20 SQL Injection via zProIdPro ParameterParoiciel
- CVE-2018-25428Paroiciel 11.20 SQL Injection via tRecIdListe ParameterParoiciel
- CVE-2026-10292UTT HiPER 1200GW formTaskEdit strcpy stack-based overflowUTT HiPER 1200GW
- CVE-2026-49139Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl PoisoningHKUDS nanobot
- CVE-2026-49136Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.pyAnionex banana-slides
- CVE-2021-46747Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to…AMD Athlon™ 3000 Series Mobile Processors with Radeon™… +23
- CVE-2026-49135CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflowsteipete CodexBar
- CVE-2026-49134CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp Filesteipete CodexBar
- CVE-2026-24751Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks Secure Data Forms
- CVE-2026-43625CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirectsteipete CodexBar
- CVE-2026-47294Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-43624F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()SWivid F5-TTS
- CVE-2026-43623microtar 0.1.0 Stack-Based Buffer Overflow via raw_to_header()rxi microtar
- CVE-2026-9330IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
- CVE-2026-9614An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain…Ivanti Neurons for ITSM
- CVE-2026-7770IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i NavigatorIBM i Access Family
- CVE-2026-41013Tenant-controlled comma smuggles arbitrary CIFS mount optionsCloudFoundry Foundation smb-volume-release · CloudFoundry F…
- CVE-2026-43958Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of serviceRed Hat Enterprise Linux
- CVE-2026-45727CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletionCloakHQ CloakBrowser · cloakbrowser
- CVE-2026-45302Prototype Pollution in parse-nested-form-data via `proto` in FormData field namesmilamer parse-nested-form-data · parse-nested-form-data
- CVE-2024-52011launch-editor vulnerable to command injection via the crafted request on Windowsvitejs launch-editor · vitejs vite +2
- CVE-2026-45722Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Viewsnextcloud security-advisories
- CVE-2026-45545Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Executionnextcloud security-advisories
- CVE-2026-45281Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Updatenextcloud security-advisories
- CVE-2026-45156Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDCnextcloud security-advisories
- CVE-2026-8501CVE-2026-8501Symantec PC Tools Internet Security
- CVE-2026-46243smb: client: reject userspace cifs.spnego descriptionsLinux
- CVE-2022-4991Tychon is vulnerable to privilege escalation due to OPENSSLDIR locationTychon
- CVE-2026-10118Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationRed Hat Enterprise Linux · Red Hat AI Inference Server +2
- CVE-2026-10270D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflowD-Link DI-7001 MINI
- CVE-2026-42673WordPress Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin <= 3.3.6 - Sensitive Data Exposure…Logtivity Activity Logs Activity Logs, User Activity Tracki…
- CVE-2026-42674WordPress Advanced Access Manager plugin <= 7.1.0 - Bypass Vulnerability vulnerabilityAAM Plugin Advanced Access Manager
- CVE-2026-42675WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerabilityThemefic Hydra Booking
- CVE-2026-42677WordPress WP Document Revisions plugin <= 3.8.1 - Broken Access Control vulnerabilityBen Balter WP Document Revisions
- CVE-2026-42678WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP GiveWP
- CVE-2026-42681WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerabilityE2Pdf.com e2pdf
- CVE-2026-42683WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-48839WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP Statistics
- CVE-2026-48865WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerabilityThimPress LearnPress
- CVE-2026-42251Hard-coded credentials in KS-SOMEDKAMSOFT KS-SOMED
- CVE-2024-40646Vertex Vulnerable to Path Traversalvertex-app vertex
- CVE-2026-10259H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflowH3C Magic B0
- CVE-2026-40546Multiple SQL Injections in SOPlanningSOPlanning
- CVE-2026-40543Missing Authorization in SOPlanningSOPlanning
- CVE-2026-48827Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-gitApache Software Foundation org.apache.sshd:sshd-git · org.a…
- CVE-2026-9024Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release…Dassault Systèmes DELMIA Service Process Engineer
- CVE-2026-44825Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure usersApache Software Foundation org.apache.solr:solr-core · org.…
- CVE-2026-49361Apache Fluss Netty Frame Decoder Memory Exhaustion VulnerabilityApache Software Foundation Apache Fluss · org.apache.fluss:…
- CVE-2026-40961Apache Airflow: Open Redirect Bypass VulnerabilityApache Software Foundation apache-airflow-core · apache-… +1
- CVE-2026-41084Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutationApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-42359Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validatorApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-45360Apache Airflow: Arbitrary import in custom deadline-reference deserializationApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-49298Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-42588Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnectorApache Software Foundation org.apache.activemq:activemq-… +4
- CVE-2026-45505Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper BypassApache Software Foundation org.apache.activemq:activemq-… +4
- CVE-2026-49157Apache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by defaultApache Software Foundation org.apache.activemq:apache-activ…
- CVE-2026-32325Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.Fsas Technologies ServerView Agents for Windows
- CVE-2026-27788Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier.Fsas Technologies ServerView Agents for Windows
- CVE-2026-35563Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostnameApache Software Foundation org.apache.directory.api:api-lda…
- CVE-2026-48209Reflected XSS in authenticated agent contextOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2026-20455In geniezone, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20452In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow.MediaTek chipset
- CVE-2026-10206D-Link DI-8400 dbsrv.asp stack-based overflowD-Link DI-8400
- CVE-2025-70099A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a…
- CVE-2026-37220FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent.
- CVE-2026-37221FlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding pending event.
- CVE-2026-37222FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages.
- CVE-2026-37223FlexRIC v2.0.0 contains a reachable assertion in the iApp message dispatcher.
- CVE-2026-37224FlexRIC v2.0.0 crashes when receiving a duplicate E2_SETUP_REQUEST from the same or spoofed E2 Node.
- CVE-2026-37225FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST with an empty ricEventTriggerDefinition field.
- CVE-2026-37226FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node.
- CVE-2026-37227FlexRIC v2.0.0 contains reachable assert(0) calls in stub message handlers for whitelisted but unimplemented E2AP message types in the…
- CVE-2026-37228FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c).
- CVE-2026-37229FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails.
- CVE-2026-37230FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry.
- CVE-2026-37231FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields.
- CVE-2026-37232An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation.
- CVE-2026-37233FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism.
- CVE-2026-37234FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.
- CVE-2026-37235FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association.
- CVE-2026-38950An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files.
Medium, low and unrated 218
- CVE-2026-105141Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting1Panel-dev CordysCRM
- CVE-2026-10302itsourcecode Fees Management System manage_fee.php sql injectionitsourcecode Fees Management System
- CVE-2026-9048Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information ExposureRevolution Slider Slider Revolution
- CVE-2026-9050Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin DeactivationRevolution Slider Slider Revolution
- CVE-2026-10301itsourcecode Fees Management System index.php cross site scriptingitsourcecode Fees Management System
- CVE-2026-10300SGLang Inference HTTP Endpoint lora_manager.py assertionSGLang
- CVE-2026-10299code-projects Online Hospital Management System viewdoctortimings.php resource injectioncode-projects Online Hospital Management System
- CVE-2026-10298ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereferenceggml-org whisper.cpp
- CVE-2026-28511elabftw has entry title leakage through autocompletion searchelabftw
- CVE-2026-10297itsourcecode Fees Management System manage_course.php sql injectionitsourcecode Fees Management System
- CVE-2025-59614Out-of-bounds Write in Windows ComputeQualcomm Snapdragon
- CVE-2025-59613Stack-based Buffer Overflow in Windows ComputeQualcomm Snapdragon
- CVE-2025-59612Stack-based Buffer Overflow in Windows ComputeQualcomm Snapdragon
- CVE-2025-59611Out-of-bounds Write in Core ServicesQualcomm Snapdragon
- CVE-2025-59610Time-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverQualcomm Snapdragon
- CVE-2025-59609Buffer Over-read in WLAN Host CommunicationQualcomm Snapdragon
- CVE-2025-59601Exposure of Sensitive Information Through Metadata in Powerline Communication FirmwareQualcomm Snapdragon
- CVE-2026-10296itsourcecode Fees Management System ajax.php sql injectionitsourcecode Fees Management System
- CVE-2026-24761Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-24756Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-24755Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-24754Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks security-advisories
- CVE-2026-24753Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-10295SourceCodester Customer Review App review_app.py get_all_reviews denial of serviceSourceCodester Customer Review App
- CVE-2026-10294PackageKit API pk-transaction.c g_file_test improper authorizationPackageKit
Show all 218 entriesShow fewer entries
- CVE-2026-28586In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass.Google Android
- CVE-2026-28581In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the…Google Android
- CVE-2026-28578In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation.Google Android
- CVE-2026-0086In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check.Google Android
- CVE-2026-0085In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation.Google Android
- CVE-2026-0080In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Google Android
- CVE-2026-0079In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Google Android
- CVE-2026-0074In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion.Google Android
- CVE-2026-0070In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input…Google Android
- CVE-2026-0069In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion.Google Android
- CVE-2026-0067In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error…Google Android
- CVE-2026-0061In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay…Google Android
- CVE-2026-0060In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root…Google Android
- CVE-2026-0056In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check.Google Android
- CVE-2026-0055In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid…Google Android
- CVE-2026-0052In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Google Android
- CVE-2026-0051In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation.Google Android
- CVE-2026-0050In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass.Google Android
- CVE-2026-0048In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack.Google Android
- CVE-2026-0046In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay…Google Android
- CVE-2026-0044In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow.Google Android
- CVE-2026-0043In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Google Android
- CVE-2026-0042In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion.Google Android
- CVE-2026-0041In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow.Google Android
- CVE-2026-0040In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Google Android
- CVE-2026-0039In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Google Android
- CVE-2026-0018In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validationGoogle Android
- CVE-2026-0016In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a peGoogle Android
- CVE-2025-48648In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion.Google Android
- CVE-2025-48616In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic…Google Android
- CVE-2018-25435ZeusCart 4.0 Deactivate Customer Accounts CSRFZeusCart
- CVE-2026-10291Enderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redosEnderfga claw-orchestrator · @enderfga/claw-orchestrator
- CVE-2026-10290code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injectioncode-projects Hotel and Tourism Reservation System
- CVE-2026-10289code-projects Hotel and Tourism Reservation System tour.php cross site scriptingcode-projects Hotel and Tourism Reservation System
- CVE-2026-10288code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authenticationcode-projects Hotel and Tourism Reservation System
- CVE-2026-49433DeepAI api.deepai.org/change_user_email CSRFapi.deepai.org
- CVE-2026-49140Nanobot < 0.2.1 Denial of Service via Matrix Media Download HandlerHKUDS nanobot
- CVE-2026-10287SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgerySourceCodester SEO Meta Tag Extractor
- CVE-2026-49138Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect FollowingHKUDS nanobot · nanobot-ai
- CVE-2026-10286CodeAstro Payroll System home_employee.php sql injectionCodeAstro Payroll System
- CVE-2026-5419Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalgnutls · Red Hat Enterprise Linux +6
- CVE-2026-10285DevaslanPHP project-management Ticket KanbanScrumHelper.php recordUpdated improper authorizationDevaslanPHP project-management
- CVE-2026-10284DevaslanPHP project-management Livewire ViewTicket.php doDeleteComment improper authorizationDevaslanPHP project-management
- CVE-2026-10283Bottelet DaybydayCRM Setting missing authenticationBottelet DaybydayCRM
- CVE-2026-10282Bottelet DaybydayCRM DocumentsController.php view improper authorizationBottelet DaybydayCRM
- CVE-2026-10281Enderfga claw-orchestrator API Endpoint embedded-server.ts EmbeddedServer missing authenticationEnderfga claw-orchestrator · @enderfga/claw-orchestrator
- CVE-2026-23638Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-30963Capsule Namespace Hijacking via subresourceprojectcapsule capsule · github.com/projectcapsule/capsule
- CVE-2026-10280horizon921 mcpilot MCP API Call Endpoint route.ts server-side request forgeryhorizon921 mcpilot
- CVE-2026-40990Unbounded cache for function definitionsSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2026-40989Self Routing guard bypassed via function compositionSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2026-10279hiraishikentaro wezterm-mcp switch_pane/write_to_specific_pane wezterm_executor.ts os command injectionhiraishikentaro wezterm-mcp
- CVE-2026-22872Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerabilityprojectcapsule capsule · github.com/projectcapsule/capsule
- CVE-2026-10278ishayoyo excel-mcp read_file/write_file index.ts path traversalishayoyo excel-mcp
- CVE-2026-45729ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed inputthorvg
- CVE-2026-10277j3k0 mcp-google-workspace MCP Gmail Tool gmail.ts saveToDisk access controlj3k0 mcp-google-workspace
- CVE-2026-45810Nextcloud: Propfind requests for file comments allowed to load comments for other filesnextcloud security-advisories
- CVE-2026-45691Nextcloud: Bypass of second factor authentication on DAV endpointsnextcloud security-advisories
- CVE-2026-45690Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replaynextcloud security-advisories
- CVE-2026-45544Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewServicenextcloud security-advisories
- CVE-2026-45543Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files sharenextcloud security-advisories
- CVE-2026-10276hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgeryhekmon8 Jenkins-server-mcp
- CVE-2026-45286Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpointnextcloud security-advisories
- CVE-2026-45284Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticatenextcloud security-advisories
- CVE-2026-45285Nextcloud: Hidden Public Link creation when sharing to a Team External Membernextcloud security-advisories
- CVE-2026-45283Nextcloud: Files Lock app allows users to lock and unlock files of other usersnextcloud security-advisories
- CVE-2026-45282Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file…nextcloud security-advisories
- CVE-2026-45279Nextcloud: Limited path traversal via template API if using `{lang}` in confignextcloud security-advisories
- CVE-2026-45278Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypassnextcloud security-advisories
- CVE-2026-45277Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associationsnextcloud security-advisories
- CVE-2026-45275Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approversnextcloud security-advisories
- CVE-2026-10275OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflowOpenSC
- CVE-2026-45267Nextcloud: Missing permission check for from submissionsnextcloud security-advisories
- CVE-2026-45266Nextcloud: Unauthorized force-mute from missing permission check when using internal signalingnextcloud security-advisories
- CVE-2026-45159Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share ownernextcloud security-advisories
- CVE-2026-45157Nextcloud: Valid share tokens allow to access tempory upload files of share ownernextcloud security-advisories
- CVE-2026-45155Nextcloud: Private circle can be added to another circle via APInextcloud security-advisories
- CVE-2026-45154Nextcloud: Improper Access Control in Collectivesnextcloud security-advisories
- CVE-2026-45153Nextcloud: PIN bypass in PassCodeActivity via back buttonnextcloud security-advisories
- CVE-2026-45264Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renamesnextcloud security-advisories
- CVE-2026-10274indrasishbanerjee aem-mcp-server Axios Request Flow mcp-server.ts getAssetMetadata server-side request forgeryindrasishbanerjee aem-mcp-server
- CVE-2026-10273php-censor Webhook Endpoint GitBuild.php os command injectionphp-censor
- CVE-2026-45701Sulu: Weak Cryptographical usage for API Key generation and Reset Tokenssulu · sulu/sulu
- CVE-2026-44740go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustiongo-git go-billy · github.com/go-git/go-billy/v5 +1
- CVE-2026-10272a4m4 Student-Management-System deleteform.php improper authorizationa4m4 Student-Management-System
- CVE-2026-10271a4m4 Student-Management-System Admin Endpoint admin redirecta4m4 Student-Management-System
- CVE-2026-42671WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerabilityPaolo GeoDirectory
- CVE-2026-42676WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerabilitymyCred
- CVE-2026-10269decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorizationdecolua 9router
- CVE-2026-42679WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerabilityMamunur Rashid Classified Listing
- CVE-2026-8643pip can extract console_scripts and gui_scripts outside installation directoryPython Packaging Authority pip · pip
- CVE-2026-10268janet-lang janet marsh.c unmarshal_one_fiber integer overflowjanet-lang janet
- CVE-2026-10267janet-lang janet debug.c doframe out-of-boundsjanet-lang janet
- CVE-2026-10265itsourcecode Content Management System edit_topic.php sql injectionitsourcecode Content Management System
- CVE-2026-10264lharries whatsapp-mcp Send API Endpoint main.go SendMessageRequest path traversallharries whatsapp-mcp
- CVE-2026-10263SourceCodester Computer Repair Shop Management System manage_product.php sql injectionSourceCodester Computer Repair Shop Management System
- CVE-2026-10262code-projects Real State Services Login loginuser.php sql injectioncode-projects Real State Services
- CVE-2026-10261CodeAstro Online Job Portal application_status.php sql injectionCodeAstro Online Job Portal
- CVE-2026-10533Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradationRed Hat OpenShift Container Platform
- CVE-2026-48559Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tagsepoupon lms
- CVE-2026-10260CodeAstro Online Job Portal delete-jobs.php sql injectionCodeAstro Online Job Portal
- CVE-2026-10258itsourcecode Content Management System add_sub_topic.php sql injectionitsourcecode Content Management System
- CVE-2026-10257itsourcecode Content Management System update_ss_img.php sql injectionitsourcecode Content Management System
- CVE-2026-10256itsourcecode Content Management System save_comment.php sql injectionitsourcecode Content Management System
- CVE-2026-10255SourceCodester Pharmacy Sales and Inventory System ShowForm.php sell_statement access controlSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-10254SourceCodester Pet Grooming Management Software admin file information disclosureSourceCodester Pet Grooming Management Software
- CVE-2026-10532Logback deserialization whitelist bypass for Proxy objectsQOS.CH Sarl logback · ch.qos.logback:logback-core
- CVE-2026-10253itsourcecode Online House Rental System manage_payment.php sql injectionitsourcecode Online House Rental System
- CVE-2026-9309Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injectionMozilla Firefox for iOS
- CVE-2026-9308Arbitrary JavaScript execution in Reader View due to wrong HTML replacement orderMozilla Firefox for iOS
- CVE-2026-10252itsourcecode Online House Rental System manage_tenant.php sql injectionitsourcecode Online House Rental System
- CVE-2026-34193GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()Imagination Technologies Graphics DDK
- CVE-2026-10251itsourcecode Online House Rental System ajax.php login sql injectionitsourcecode Online House Rental System
- CVE-2026-10250itsourcecode Online Blood Bank Management System campsdetails.php sql injectionitsourcecode Online Blood Bank Management System
- CVE-2026-10249itsourcecode Online Blood Bank Management System viewrequest.php sql injectionitsourcecode Online Blood Bank Management System
- CVE-2026-10248SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injectionSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-49328Apache Fesod (Incubating): Improper validation of user-supplied URLs leading to SSRFApache Software Foundation org.apache.fesod:fesod-sheet · o…
- CVE-2026-10247SourceCodester Pharmacy Sales and Inventory System main create_generic_name cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-10246SourceCodester Pharmacy Sales and Inventory System main create_medicine_presentation cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-25600Credential Exposure Vulnerability in Trac PDBMTrac d.o.o. PDBM
- CVE-2026-10245SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-25599Missing authentication and clear‑text data transmission affecting Orca heat pumpsOrca Energy Orca heat pump · Orca Energy Orca user portal
- CVE-2026-10244SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-40549Cross-Site Request Forgery in SOPlanningSOPlanning
- CVE-2026-40548Unrestricted Upload of File with Dangerous Type in SOPlanningSOPlanning
- CVE-2026-40547Path Traversal in SOPlanningSOPlanning
- CVE-2026-40545Reflected XSS in SOPlanningSOPlanning
- CVE-2026-40544Stored XSS in SOPlanningSOPlanning
- CVE-2026-10243code-projects Smart Parking System Admin Endpoint missing authenticationcode-projects Smart Parking System
- CVE-2026-10242itsourcecode Content Management System instructions.php sql injectionitsourcecode Content Management System
- CVE-2026-10241jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side…jeecgboot The server processes these URLs
- CVE-2026-10240JeecgBoot test server-side request forgeryJeecgBoot
- CVE-2026-10239JeecgBoot edit WordUtil.addImage server-side request forgeryJeecgBoot
- CVE-2026-40861Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandlerApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-40963Apache Airflow: DAG authorization bypass on /ui/structure/structure_dataApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-41014Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpointsApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-49267Apache Airflow: No certificate validation on SMTP STARTTLS connectionsApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-41017Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxyApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-42360Apache Airflow: Rendered template truncation bypasses nested sensitive-key maskingApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-42358Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secretsApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-8474Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.StormShield Network Security
- CVE-2026-45426Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log accessApache Software Foundation apache-airflow-core · airflow +1
- CVE-2026-46764Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filterApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-10237SourceCodester Water Billing Management System User Management manage_user sql injectionSourceCodester Water Billing Management System
- CVE-2026-48726Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout pathApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-10236SourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorizationSourceCodester Water Billing Management System
- CVE-2026-42253Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message PropertiesApache Software Foundation org.apache.activemq:apache-ac… +2
- CVE-2026-46605Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removalApache Software Foundation org.apache.activemq:activemq-… +2
- CVE-2026-49270Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)Apache Software Foundation org.apache.activemq:activemq-… +4
- CVE-2026-10235CodeAstro Ingredients Stock Management System stock_manager.php sql injectionCodeAstro Ingredients Stock Management System
- CVE-2026-10234Mettle sendportal Campaign webview cross site scriptingMettle sendportal
- CVE-2026-45192Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API ResponseApache Software Foundation apache-airflow · Apache Softw… +2
- CVE-2026-10233Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-boundsAssimp
- CVE-2026-10232Assimp ASE File scene.cpp ~aiNode use after freeAssimp
- CVE-2026-10231Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflowAssimp
- CVE-2026-10230Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflowAssimp
- CVE-2026-10229Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflowAssimp
- CVE-2026-10228raisulislamg4 student_management_system_by_php admission_form_check.php cross site scriptingraisulislamg4 student_management_system_by_php
- CVE-2026-10227raisulislamg4 student_management_system_by_php User Creation add_user_check.php sql injectionraisulislamg4 student_management_system_by_php
- CVE-2026-10226raisulislamg4 student_management_system_by_php delete.php sql injectionraisulislamg4 student_management_system_by_php
- CVE-2026-10225raisulislamg4 student_management_system_by_php Login login_check.php sql injectionraisulislamg4 student_management_system_by_php
- CVE-2026-10224NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumptionNousResearch hermes-agent · hermes-agent
- CVE-2026-10223NousResearch hermes-agent memory_tool.py _scan_memory_content injectionNousResearch hermes-agent · hermes-agent
- CVE-2026-10222NousResearch hermes-agent config.py _sanitize_env_lines injectionNousResearch hermes-agent · hermes-agent
- CVE-2026-10221NousResearch hermes-agent run_agent.py _compress_context injectionNousResearch hermes-agent · hermes-agent
- CVE-2026-48187Email with special content can lead to DoSOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2026-48189Bypass DedicatedAgentToCustomerGroups SettingOTRS AG OTRS
- CVE-2026-48190Incorrect handling of permissions in External Interface Config Item List moduleOTRS AG OTRS
- CVE-2026-48191Wrong Permission Handling in Document Search Article Meta FiltersOTRS AG OTRS
- CVE-2026-48208Denial-of-Service via SVG Rendering in TicketOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2026-10220NousResearch hermes-agent skills_tool.py skill_view injectionNousResearch hermes-agent
- CVE-2026-20456In wlan STA driver, there is a possible system crash due to a missing bounds check.MediaTek chipset
- CVE-2026-20454In geniezone, there is a possible out of bounds write due to a race condition.MediaTek chipset
- CVE-2026-20453In geniezone, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-10219nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injectionnextlevelbuilder GoClaw · github.com/nextlevelbuilder/goclaw
- CVE-2026-10218nextlevelbuilder GoClaw evolution_handlers.go auth improper authorizationnextlevelbuilder GoClaw
- CVE-2026-10217nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges managementnextlevelbuilder GoClaw
- CVE-2026-10216unitedbyai droidclaw claim Endpoint pairing.ts excessive authenticationunitedbyai droidclaw
- CVE-2026-10215Dolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorizationDolibarr ERP CRM · dolibarr/dolibarr
- CVE-2026-10214zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injectionzhayujie chatgpt-on-wechat
- CVE-2026-10213AstrBotDevs AstrBot API Endpoint delete path traversalAstrBotDevs AstrBot
- CVE-2026-10212AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorizationAstrBotDevs AstrBot · astrbot
- CVE-2026-10211AstrBotDevs AstrBot fs.py _normalize_rw_path authorizationAstrBotDevs AstrBot
- CVE-2026-10210AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injectionAstrBotDevs AstrBot
- CVE-2026-10209code-projects Online Hospital Management System Appointment appointmentdetail.php sql injectioncode-projects Online Hospital Management System
- CVE-2026-10208code-projects Online Hospital Management System login_1.php login_user sql injectioncode-projects Online Hospital Management System
- CVE-2026-10205Metasoft 美特软件 MetaCRM upload.jsp unrestricted uploadMetasoft 美特软件 MetaCRM
- CVE-2025-55664A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of…
- CVE-2025-60481A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.02.0 allows…
- CVE-2025-60483A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before…
- CVE-2025-60485A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before 26.02.0 allows…
- CVE-2025-60486A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a…
- CVE-2025-60495A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box before 26.02.0 allows…