CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-115535gedelumbung HospitalManagement Settings sistem.php simpan cross site scriptinggedelumbung HospitalManagement
- CVE-2025-45528An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF
- CVE-2026-106763An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions@justice8096/sagemath-mcp-server
- CVE-2026-106764An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function@rog0x/mcp-git-tools
- CVE-2026-106765An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function@rog0x/mcp-docker-tools
- CVE-2026-50787e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php
- CVE-2026-52356An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell…
- CVE-2026-115534gedelumbung HospitalManagement Contact Form contact.php kirim cross site scriptinggedelumbung HospitalManagement
- CVE-2026-110825Kiloview E3 NDI Encoder Missing Authentication for Critical FunctionKiloview E3 Firmware
- CVE-2026-92450Kiloview E3 NDI Encoder Use of Hard-coded CredentialsKiloview E3 Firmware
- CVE-2026-110243Kiloview E3 NDI Encoder OS Command InjectionKiloview E3 Firmware
- CVE-2026-107861Kiloview E3 NDI Encoder OS Command InjectionKiloview E3 Firmware
- CVE-2026-110491Kiloview E3 NDI Encoder NULL Pointer DereferenceKiloview E3 Firmware
- CVE-2026-105265Kiloview E3 NDI Encoder Path TraversalKiloview E3 Firmware
- CVE-2026-96616Kiloview E3 NDI Encoder Insufficient Session ExpirationKiloview E3 Firmware
- CVE-2026-111100Kiloview E3 NDI Encoder Missing Authentication for Critical FunctionKiloview E3 Firmware
- CVE-2026-109122Kiloview E3 NDI Encoder OS Command InjectionKiloview E3 Firmware
- CVE-2026-110063VM Inspector for Azure Virtual Machines Elevation of Privilege VulnerabilityMicrosoft VM Inspector for Azure Virtual Machines
- CVE-2026-83938Azure Kubernetes Configuration Service Elevation of Privilege VulnerabilityMicrosoft Azure Kubernetes Configuration Service
- CVE-2026-96185Microsoft Exchange Online Remote Code Execution VulnerabilityMicrosoft Exchange Online
- CVE-2026-97785AAD App Proxy Elevation of Privilege VulnerabilityMicrosoft Entra application proxy
- CVE-2026-108456Azure AI Foundry Elevation of Privilege VulnerabilityMicrosoft Azure AI Foundry
- CVE-2026-105014Azure Pipelines Remote Code Execution VulnerabilityMicrosoft Azure Pipelines
- CVE-2026-111594InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive InformationInterSystems IRIS for Health
- CVE-2026-114620Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFauthlib
- CVE-2026-114619Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokensauthlib
- CVE-2026-114618Authlib: Default JWT bearer grant accepts assertions for the wrong audienceauthlib
- CVE-2026-114617Authlib: ID token can disable its own nonce validation via the nonce_supported claimauthlib
- CVE-2026-115449Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guestRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-114616Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)authlib