CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-115324mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Storemem0ai mem0 · mem0ai
- CVE-2026-115323EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address APIevershopcommerce evershop
- CVE-2026-115322Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlersbytebase
- CVE-2026-115321Bytebase before 3.16.0 Authorization Bypass via UpdateIssueCommentbytebase
- CVE-2026-115319fzf 0.36.0 through 0.74.5 Denial of Service via maskActionContentsjunegunn fzf
- CVE-2026-114665Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileComparezhenorzz goploy · github.com/zhenorzz/goploy
- CVE-2025-71434Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/listWeaver Network Co. E-cology
- CVE-2024-58396YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileIdYouDataSum CPAS Audit Management System
- CVE-2024-58394Retool < 3.88.0 XSS via /api/imageProxy SVG ProxyingRetool
- CVE-2024-58393i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.phpi-Netsolution Readymade Unilevel Ecommerce MLM
- CVE-2023-54413WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_langOnTheGoSystems WPML Multilingual CMS
- CVE-2022-51025Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transferPenta Security Systems WAPPLES
- CVE-2022-51024Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload EndpointKareadita Kavita
- CVE-2022-51023PHPOK < 5.4.081 SQL Injection via api.php sort ParameterPHPOK
- CVE-2022-51022YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpointliukuo362573 YiShaAdmin
- CVE-2022-51021NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpointWPDeveloper NotificationX
- CVE-2021-48017OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgiOrbiTeam BSCW Server
- CVE-2021-48016DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.phpDedeCMS
- CVE-2021-48015JeeWMS Path Traversal via showOrDownByurl.doerzhongxmu JeeWMS
- CVE-2021-48014FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServerFanRuan FineReport
- CVE-2021-48013Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownloadWeaver Network Co. E-cology
- CVE-2020-37284Sickbeard build-507 Reflected XSS via testNaming pattern Parametermidgetspy Sickbeard
- CVE-2019-25779WooThemes Diarise 1.5.9 Local File Disclosure via download.phpWooThemes Diarise
- CVE-2019-25778SeaCMS 8.7 SQL Injection via comment/api/index.php rlist ParameterSeaCMS
- CVE-2018-25439MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir ParameterMetInfo
- CVE-2018-25438Intermesh Group-Office < 3.5.5 Path Traversal via compress.phpIntermesh Group-Office
- CVE-2017-20290Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribedDiscourse
- CVE-2017-20289Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameterBroadstreet Ad Widget
- CVE-2017-20288QCubed 3.1.1 Reflected XSS via installer step_2.phpQCubed
- CVE-2017-20287Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn ParameterJavo Themes Javo Spot