CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-113082Integer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the…Google Chrome
- CVE-2026-113058Missing authorization in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-113242Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the…Google Chrome
- CVE-2026-113098Type confusion in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
- CVE-2026-113097Missing authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-113101Incorrect authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-113303Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-113271Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-113280Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via…Google Chrome
- CVE-2026-113072Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-113279Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-113341Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside…Google Chrome
- CVE-2026-112712@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch@fastify/middie
- CVE-2026-112407Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applicationsAWS CICD-toolchain-for-serverless-applications
- CVE-2016-20104EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.phpEyeLock nano NXT
- CVE-2016-20103Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.phpCherry Team Cherry Plugin
- CVE-2016-20102JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameterJavaMelody
- CVE-2016-20101Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.phpPedro Marcelo Issuu Panel
- CVE-2016-20100Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-previewIan Howatson Memphis Documents Library
- CVE-2015-20128FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspxFooSun DotNetCMS
- CVE-2015-20125Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.phpAspose PDF Exporter
- CVE-2015-20124Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.phpAspose Importer & Exporter
- CVE-2015-20123Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.phpAspose Doc Exporter
- CVE-2014-125134ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.phpChurcHope
- CVE-2014-125133NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.phpimithemes NativeChurch
- CVE-2014-125132Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.phpJason Newman Blogroll Fun
- CVE-2014-125131DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.phpDedeCMS
- CVE-2012-20005SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg ParameterŁukasz Więcek SocialFit
- CVE-2012-20004K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff ParameterCarles Reverter K-news
- CVE-2012-20003Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.phpWeb Updates KMU Custom Tables