CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-43845A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanismAdvantech ADAM-3600
- CVE-2026-43844A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanismAdvantech ADAM-3600
- CVE-2026-43843An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the serviceAdvantech ADAM-3600
- CVE-2026-43842A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0Advantech ADAM-3600
- CVE-2026-43841A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm functionAdvantech ADAM-3600
- CVE-2026-113469Improper Signature Verification of Active Update FilesStormshield Network Security
- CVE-2026-43840A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback functionAdvantech ADAM-3600
- CVE-2026-43839A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the serviceAdvantech ADAM-3600
- CVE-2026-101201QBinaryJson::fromBinaryData() integer overflow leading to OOB readqt
- CVE-2026-43838A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code executionAdvantech ADAM-3600
- CVE-2026-92287Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validationApache Software Foundation Apache Arrow C++ · Apache Softwa…
- CVE-2026-43837A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code executionAdvantech ADAM-3600
- CVE-2026-11960Multiple vulnerabilities in FacturaScriptsFacturaScripts
- CVE-2026-11959Multiple vulnerabilities in FacturaScriptsFacturaScripts
- CVE-2026-113465Possible DOM XSS in SNS Web Administration PortalStormshield Network Security
- CVE-2026-43836A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privilegesAdvantech ADAM-3600
- CVE-2026-43835A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanentlyAdvantech ADAM-3600
- CVE-2026-43834A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executionAdvantech ADAM-3600
- CVE-2024-2323Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account DiscoveryWSO2 Enterprise Integrator · WSO2 Identity Server +4
- CVE-2026-111090Improper Signature Verification of Firmware Update FilesStormshield Network Security
- CVE-2026-112177Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8Red Hat Enterprise Linux
- CVE-2026-113407YS-infoware｜BA-Workflow - SQL InjectionYS-infoware BA-Workflow
- CVE-2026-113406YS-infoware｜BA-Workflow - SQL InjectionYS-infoware BA-Workflow
- CVE-2026-113405YS-infoware｜BA-Workflow - SQL InjectionYS-infoware BA-Workflow
- CVE-2026-110725fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesfast-uri
- CVE-2026-113403ArmorX Global Technology｜ArmorX Spam - Command InjectionArmorX Global Technology ArmorX Spam
- CVE-2026-110306fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingfast-uri
- CVE-2026-110180fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalizationfast-uri
- CVE-2026-110095fast-uri vulnerable to improper path equivalence in relative reference normalizationfast-uri
- CVE-2026-93878DiviGear Carousel <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via update_license AJAX ActionDiviGear Carousel