CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-118995CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidatorCallBackery
- CVE-2026-118996CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfigCallBackery
- CVE-2026-13576CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashesCallBackery
- CVE-2026-119038Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked redirect…Business-GoCardless
- CVE-2026-119037Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or emptyBusiness-GoCardless
- CVE-2026-119036Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking their…Business-GoCardless
- CVE-2026-116128Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodiesStarlet
- CVE-2026-116127Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined…Starlet
- CVE-2026-115866Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request…Starlet
- CVE-2026-115865Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memoryStarlet
- CVE-2026-75882Improper access control vulnerability in ESET Encryption products for WindowsESET spol. s.r.o. ESET Endpoint Encryption · ESET spol. s.r…
- CVE-2026-116130HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_requestHTTP-Parser-XS
- CVE-2026-118988CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc routeCallBackery
- CVE-2026-87768DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding secondsDateTime-Lite
- CVE-2026-91917Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability.Dell OpenManage Enterprise
- CVE-2026-111501Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.Dell OpenManage Enterprise
- CVE-2026-111502Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability.Dell OpenManage Enterprise
- CVE-2026-111503Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL…Dell OpenManage Enterprise
- CVE-2026-112374FOSSBilling before 0.8.9 Login CSRF via Staff Guest Login APIFOSSBilling
- CVE-2026-101209Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability.Dell OpenManage Enterprise
- CVE-2026-105924NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts QtQt
- CVE-2026-111504Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument…Dell OpenManage Enterprise
- RUSTSEC-2026-0425`nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal)nix-nar
- RUSTSEC-2026-0426LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-timeorion
- RUSTSEC-2026-0428BLAKE2b produces wrong tag when using `reset()` with a different-length keyorion
- RUSTSEC-2026-0450`ocipkg`: unpacking an OCI archive can write and delete files outside the local image store (path traversal)ocipkg
- CVE-2026-101210Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-110972Use of Client-Side Authentication in PłatnikZakład Ubezpieczeń Społecznych Płatnik
- CVE-2026-110971Weak password encoding in PłatnikZakład Ubezpieczeń Społecznych Płatnik
- CVE-2026-110970Lack of traffic encryption in PłatnikZakład Ubezpieczeń Społecznych Płatnik