CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-111750AIOHTTP: Pure-Python parser request smugglingaio-libs aiohttp · aiohttp
- CVE-2026-111749AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookiesaio-libs aiohttp · aiohttp
- CVE-2026-111748AIOHTTP: Absolute-form request targets can spoof Request.schemeaio-libs aiohttp · aiohttp
- CVE-2026-112195FusionPBX Dialplan Editor dialplan.php os command injectionFusionPBX
- CVE-2026-111066AIOHTTP: File descriptor exhaustion in multipart requestsaio-libs aiohttp · aiohttp
- CVE-2024-4412Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary OperationsWSO2 Enterprise Integrator · WSO2 API Manager +8
- CVE-2026-111065AIOHTTP: Connector pool exhaustion via Max-Age overflowaio-libs aiohttp · aiohttp
- CVE-2025-13173Improper Token Revocation via Session-Bound Token Flow in Multiple WSO2 Products Allows Unauthorized Access After Session TerminationWSO2 API Control Plane · WSO2 Universal Gateway +7
- CVE-2026-111064aiohttp server lacks an initial request/header timeoutaio-libs aiohttp · aiohttp
- CVE-2025-13591Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account DiscoveryWSO2 Identity Server · WSO2 Carbon Abstract OTP Authenti… +1
- CVE-2026-112193Webkul Aureus ERP UserForm.php weak passwordWebkul Aureus ERP
- CVE-2026-111063AIOHTTP: Secure attribute not enforced for shared cookieaio-libs aiohttp · aiohttp
- CVE-2026-14511IBM MQ Denial of ServiceIBM MQ
- CVE-2026-10572IBM MQ Buffer OverflowIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-10574IBM MQ Buffer OverflowIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-10743IBM MQ Race ConditionIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-11828IBM MQ Buffer OverflowIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-11829IBM MQ Buffer OverflowIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-11831IBM MQ Heap-based Buffer OverflowIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12148IBM MQ Deserialization of Untrusted DataIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12155IBM MQ Deserialization of Untrusted DataIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12343IBM MQ Denial of ServiceIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12350IBM MQ Deserialization of Untrusted DataIBM MQ Operator · IBM MQ Advanced container images
- CVE-2025-10149Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account TakeoverWSO2 Identity Server as Key Manager · WSO2 Open Banking… +3
- CVE-2026-12660IBM MQ Path TraversalIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12665IBM MQ Buffer OverflowIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12669IBM MQ Out-of-bounds ReadIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12727IBM MQ Buffer OverflowIBM MQ Operator · IBM MQ Advanced container images
- CVE-2026-12670IBM MQ Denial of ServiceIBM MQ Operator · IBM MQ Advanced container images
- CVE-2025-7203Sensitive Information Disclosure via Management Console and Product Files in Multiple WSO2 Products Allows Retrieval of CredentialsWSO2 Universal Gateway · WSO2 Traffic Manager +6