CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2012-20002TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.phpJames Charlesworth TinyMCE Thumbnail Gallery
- CVE-2026-107929local interface connection reuse mixupcurl
- CVE-2026-111758markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)markdown-it
- CVE-2026-107928info leak uploading over WebSockets with GnuTLScurl
- CVE-2026-105960HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter InconsistencyHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-94266password leak in CURLINFO_EFFECTIVE_URLcurl
- CVE-2026-110322HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer DereferenceHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-94265Authorization: Negotiate sent to foreign origincurl
- CVE-2026-35499An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250Totolink
- CVE-2026-40627An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B202Totolink
- CVE-2026-28763A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000RTotolink
- CVE-2026-41223A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-GTotolink
- CVE-2026-33568A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.Totolink
- CVE-2026-41222A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-Totolink
- CVE-2026-40615A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X20Totolink
- CVE-2026-42020Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-GTotolink
- CVE-2026-42019Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-GTotolink
- CVE-2026-42024Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42023Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42022Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42021Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink XTotolink
- CVE-2026-42026Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)Totolink
- CVE-2026-42025Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)Totolink
- CVE-2026-9660Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-XTotolink
- CVE-2026-9659Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-XTotolink
- CVE-2026-9814An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2Totolink
- CVE-2026-9817A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-Totolink
- CVE-2026-9827A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504Totolink
- CVE-2026-9869A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0Totolink
- CVE-2026-10131An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20Totolink