CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2021-48018Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decoratorvyperlang vyper · vyper
- CVE-2020-37289Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Valuesvyperlang vyper · vyper
- CVE-2020-37288Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loopsvyperlang vyper · vyper
- CVE-2020-37287Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Argumentsvyperlang vyper · vyper
- CVE-2020-37286Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Callsvyperlang vyper · vyper
- CVE-2026-113738R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversalR6410418 Jackrong-llm-finetuning-guide
- CVE-2026-114038Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format stringRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-113737R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversalR6410418 Jackrong-llm-finetuning-guide
- CVE-2026-113736D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty passwordD-Link DHP-W610AV
- CVE-2025-60469A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows
- CVE-2025-60476A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4…
- CVE-2025-60478A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to
- CVE-2025-60479A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to
- CVE-2025-60487A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file
- CVE-2025-60489A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a…
- CVE-2025-60490A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via…
- CVE-2025-60491A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file
- CVE-2025-60492A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file
- CVE-2025-60493A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause
- CVE-2025-60497A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of
- CVE-2025-71438An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file
- CVE-2026-113735D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentialsD-Link DCS-6501LH
- CVE-2026-113707a2aproject a2a-rs inmemory.rs update race conditiona2aproject a2a-rs
- CVE-2026-113706a2aproject a2a-rs inmemory.rs information disclosurea2aproject a2a-rs
- CVE-2026-109682Metasploit Framework HTTP Redirect Server-Side Request ForgeryRapid7 Metasploit Framework
- CVE-2026-109681Metasploit Framework FTP PASV Response SSRFRapid7 Metasploit Framework
- CVE-2026-113705a2aproject a2a-rs error.rs information exposurea2aproject a2a-rs
- CVE-2026-112202Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF imagesImager-File-GIF · Imager
- CVE-2026-76587IBM Planning Analytics Buffer OverflowIBM Planning Analytics
- CVE-2026-113726virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTpypa virtualenv · virtualenv