CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-121959FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket FrameFreeRDP
- CVE-2026-121958FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeysFreeRDP
- CVE-2026-121957FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics RaceFreeRDP
- CVE-2026-121956FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgtFreeRDP
- CVE-2026-121955FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContextFreeRDP
- CVE-2026-121954FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar CodecFreeRDP
- CVE-2026-121953FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel CloseFreeRDP
- CVE-2026-121952FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 CapabilityFreeRDP
- CVE-2026-121951FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input EventFreeRDP
- CVE-2026-121950FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer WrapFreeRDP
- CVE-2026-92704SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process executionsharpemu
- CVE-2026-91163Warpgate: Kubernetes listener discloses internal error text to an unauthenticated callerwarp-tech warpgate
- CVE-2026-91168Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name accountwarp-tech warpgate
- CVE-2026-122032SPIP before 4.4.29 Authenticated SQL Injection via where ParameterSPIP
- CVE-2026-120421Reflected XSS via client window id in URL client window modeEclipse Foundation Eclipse Mojarra
- CVE-2026-100408Git for Windows: git-credential-wincred Erase Path Heap Overflowgit-for-windows git
- CVE-2026-100407Git for Windows: git-credential-wincred OAuth Store Heap Overflowgit-for-windows git
- CVE-2026-122008Oqtane Framework before 10.3.0 SSRF via File Upload From URLoqtane.framework
- CVE-2026-122007Oqtane Framework before 10.3.0 Broken Access Control via SettingControlleroqtane.framework
- CVE-2026-121637WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication ResultsWatchGuard AuthPoint Authentication Gateway
- CVE-2026-121639WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of ServiceWatchGuard AuthPoint Authentication Gateway
- CVE-2026-121638WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle AttacksWatchGuard AuthPoint Authentication Gateway
- CVE-2026-121640WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative ActionsWatchGuard AuthPoint Authentication Gateway
- CVE-2026-121009SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -funcSQL-Abstract
- CVE-2026-121008SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html…SQL-Abstract
- CVE-2026-121007SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an…SQL-Abstract
- CVE-2026-114627Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags outputWeb-Simple
- CVE-2026-121632Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escapingData-MuForm
- CVE-2026-119776frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addressesfrrouting
- CVE-2026-122006The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write…rubyonrails Active Storage