CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-121925Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO DriverSnowflake PHP PDO Driver · Snowflake Libsnowflakeclient
- CVE-2026-104799Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parametersrnlab Mobile builder
- CVE-2026-97397Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffereasywpstuff Remove Google Fonts – Disable, Block, or Replac…
- CVE-2026-114456Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client driverssnowflake-connector-python · github.com/snowflakedb/gosn… +9
- CVE-2026-59267Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruptionApache Software Foundation Apache OpenOffice
- CVE-2026-90632Apache OpenOffice: Local file inclusion via GStreamer pluginApache Software Foundation Apache OpenOffice
- CVE-2026-90634Apache OpenOffice: Out-of-bounds write when importing encrypted PDF filesApache Software Foundation Apache OpenOffice
- CVE-2026-90631Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variablesApache Software Foundation Apache OpenOffice
- CVE-2026-90629Apache OpenOffice: Out of bounds memory access during WMF importApache Software Foundation Apache OpenOffice
- CVE-2026-90628Apache OpenOffice: Stack overflow in CFF hint handlingApache Software Foundation Apache OpenOffice
- CVE-2026-90627Apache OpenOffice: Local file inclusion via SQL provider and flat file database referencesApache Software Foundation Apache OpenOffice
- CVE-2026-90626Apache OpenOffice: Out-of-bounds write when importing encrypted PDF filesApache Software Foundation Apache OpenOffice
- CVE-2026-90624Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution VulnerabilityApache Software Foundation Apache OpenOffice
- CVE-2026-59268Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF readerApache Software Foundation Apache OpenOffice
- CVE-2026-59264Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installerApache Software Foundation Apache OpenOffice
- CVE-2026-59263Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported…Apache Software Foundation Apache OpenOffice
- CVE-2026-100302Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handlingApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-115448Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverableApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-100300Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply…Apache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-100252Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization IDApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-100235Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocationApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-108500Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injectionApache Software Foundation Apache ActiveMQ
- CVE-2026-102704arbitrary read/write via grant copyXen
- CVE-2026-102703arbitrary read/write via grant copyXen
- CVE-2026-103582Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)Apache Software Foundation Apache.NMS.ActiveMQ
- CVE-2026-108946Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connectionApache Software Foundation org.apache.activemq:apache-activ…
- CVE-2026-111822Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocationApache Software Foundation org.apache.activemq:apache-activ…
- CVE-2026-111821Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journalApache Software Foundation org.apache.activemq:apache-activ…
- CVE-2026-108949Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOMApache Software Foundation org.apache.activemq:activemq-bro…
- CVE-2026-120422Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code executionSogou Input Method