CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-116801Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Queryparse-community parse-server
- CVE-2026-116800WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language HeaderWWBN AVideo
- CVE-2026-116602SourceCodester Online Food Ordering System delete.php unlink path traversalSourceCodester Online Food Ordering System
- CVE-2026-116556Argilla TextField.vue cross site scriptingArgilla
- CVE-2026-116555Argilla Sandbox.vue cross site scriptingArgilla
- CVE-2026-2270StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationKubernetes
- CVE-2026-76654Subpath symlinking on Windows nodes permits NTLM coercionKubernetes
- CVE-2026-116554Argilla Settings SettingsInfo.vue Dataset.from_disk cross site scriptingArgilla
- CVE-2026-116515itsourcecode Online Book Store book.php sql injectionitsourcecode Online Book Store
- CVE-2026-116591compress zstd: Panic on two-block framesklauspost compress · github.com/klauspost/compress/zstd +1
- CVE-2026-116748Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Tokentransmission
- CVE-2026-116747Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secretrajnandan1 kener
- CVE-2026-116746QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreviewqloapps
- CVE-2026-116745QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmationqloapps
- CVE-2026-116744ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissectorntop nDPI
- CVE-2026-116743libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_datalibyal libmsiecf
- CVE-2026-116742HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Countsamtools htslib
- CVE-2026-116741Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytesxiph speex
- CVE-2026-116740libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parsernetsurf-browser libcss
- CVE-2026-116739VMime through 0.9.2 Uninitialized Stack Memory Disclosure via uuencode Decoderkisli vmime
- CVE-2026-116738VMime through 0.9.2 Stack-Based Buffer Overflow via uuencode Decoderkisli vmime
- CVE-2026-116737libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Pathlibyal libphdi
- CVE-2026-116736libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_values_arraylibyal libpff
- CVE-2026-116735libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entrieslibyal libpff
- CVE-2026-116734flatcc through 0.6.4 Out-of-Bounds Read via verifier check_headerdvidelabs flatcc
- CVE-2026-116733flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_json_parser_numberdvidelabs flatcc
- CVE-2026-116732libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_tabledavea42 libdwarf
- CVE-2026-116731Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Importtildearrow furnace
- CVE-2026-116730Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTracker Module Importtildearrow furnace
- CVE-2026-116729libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001alibyal libfvde