CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-101213Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability.Dell OpenManage Enterprise
- CVE-2026-101214Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-111505Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2025-68395Stored XSS in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2025-68394SQL Injection in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2025-68393SQL Injection in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2025-68392Incorrect authorization in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2025-68391Arbitrary File Upload in ProtectelARKETEAM PROTECTELMAJ · ARKETEAM BDF
- CVE-2026-119591SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES ClauseSQLite
- CVE-2026-119586SQLite CLI through 3.54.1 Command Injection via .recover OutputSQLite
- CVE-2026-119568vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijackingvsftpd
- CVE-2026-119567vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliasesvsftpd
- CVE-2026-119566Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirectsprometheus
- CVE-2026-119565Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification UpdatePlausible Analytics
- CVE-2026-119564Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDsPlausible Analytics
- CVE-2026-119563phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table NamephpMyAdmin
- CVE-2026-119562phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attributephpMyAdmin
- CVE-2026-119561phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServerphpMyAdmin
- CVE-2026-119560OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fieldsopnsense core
- CVE-2026-119559OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatchlitespeedtech openlitespeed
- CVE-2026-119558OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward PointsOpenCart
- CVE-2026-119557n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Noden8n-io n8n
- CVE-2026-119556Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitemsMoodle Project moodle
- CVE-2026-119555Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedbackMoodle Project moodle
- CVE-2026-119554Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumberMoodle Project moodle
- CVE-2026-119553Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path TraversalMoodle Project moodle
- CVE-2026-119552Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handlerlouislam uptime-kuma
- CVE-2026-119551Jellyfin through 12.4 Authorization Bypass via GET /Items/Suggestionsjellyfin
- CVE-2026-119550Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}jellyfin
- CVE-2026-119549Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Imagesjellyfin