CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-119123ImageMagick before 7.1.2-34 Stack Overflow in TIFF DecoderImageMagick
- CVE-2026-119122Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Checkunclecode crawl4ai
- CVE-2026-119121Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_forunclecode crawl4ai
- CVE-2026-119120Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_nameunclecode crawl4ai
- CVE-2026-119119Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fieldsunclecode crawl4ai
- CVE-2026-119118Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flagsunclecode crawl4ai
- CVE-2026-90872Server-Side Script Injection in Manager Web UI in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90871Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90870Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90869Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90868OS Command Injection in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90867Improper Access Control of Web Admin Console in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90866Virtual Folder Path Confinement Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90865Command Injection via FTP Notification Variables in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90864Host Administrator Path Containment Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90863Privilege Escalation via Missing Authorization in WS_FTP ManagerProgress Software WS_FTP Server
- CVE-2026-90862Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-90861Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-84296SSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-84295Improper Authentication in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115793Resource exhaustion from RPC sessions kept for requests to unknown interfaceRT-Labs P-Net
- CVE-2026-115794Alarm data length not validated against received frame lengthRT-Labs P-Net
- CVE-2026-115795Out-of-bounds read of DCP block header in DCP Set and Identify request parsingRT-Labs P-Net
- CVE-2026-111736NULL pointer dereference on implicit read of user specific record indexRT-Labs P-Net
- CVE-2026-112200Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endiannessRT-Labs P-Net
- CVE-2026-84294Information Disclosure in Ad Hoc Transfer in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-111735Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()RT-Labs P-Net
- CVE-2026-111734Missing length validation of EtherType, VLAN and FrameID fields in pf_eth_recv()RT-Labs P-Net
- CVE-2026-111733NULL pointer dereference on implicit read of AR specific record indexRT-Labs P-Net
- CVE-2026-111732Out-of-bounds write when parsing AR Vendor Block requestsRT-Labs P-Net