CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-116162Parse Server 9.0.0 before 9.10.5-alpha.5 Privilege Escalation via SMS MFA Loginparse-community parse-server
- CVE-2026-116161Parse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Information Disclosure via $or Subscriptionsparse-community parse-server
- CVE-2026-116160ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 AnimateImageMagick
- CVE-2026-116159ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl OptionImageMagick
- CVE-2026-116158ImageMagick before 7.1.2-33 Memory Leak in magick compareImageMagick
- CVE-2026-116157ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property ReadingImageMagick
- CVE-2026-116156ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile OptionImageMagick
- CVE-2026-116155ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP ProfileImageMagick
- CVE-2026-116154ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth LimitImageMagick
- CVE-2026-116153ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bitImageMagick
- CVE-2026-116152ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error PathImageMagick
- CVE-2026-116151ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG EncoderImageMagick
- CVE-2026-116150ImageMagick before 7.1.2-33 Memory Leak in FPX EncoderImageMagick
- CVE-2026-116149ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed ImagesImageMagick
- CVE-2026-116148ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing OptionsImageMagick
- CVE-2026-116147ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU DecoderImageMagick
- CVE-2026-116146ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL DecoderImageMagick
- CVE-2026-116145ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete FixImageMagick
- CVE-2026-116144ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG DecoderImageMagick
- CVE-2026-116143ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS DecodersImageMagick
- CVE-2026-116142ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-BoxImageMagick
- CVE-2026-116141ImageMagick before 7.1.2-33 Policy Bypass in UHDR DecoderImageMagick
- CVE-2026-116140ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation ParsingImageMagick
- CVE-2026-116139WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown RenderingWWBN AVideo
- CVE-2026-116052LinkStackOrg LinkStack cross-site request forgeryLinkStackOrg LinkStack
- CVE-2026-116137adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Namescthackers adm-zip
- CVE-2026-116136ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version LinkingProjectSend
- CVE-2026-116073Leon before commit 50df142 Path Traversal via /download model Commandleon-ai leon
- CVE-2026-116072Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivityDocile-Alligator Infinity for Reddit
- CVE-2026-116071rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryptionrotki