CVEs
Browse the synced catalog, newest first.
- CVE-2026-111573Privilege escalation via unprotected Windows agent data folderCheckmk
- CVE-2026-80303Avast WFP stream parser integer underflow causes system crashGen Digital Avast Antivirus, Avast One, Avast Premium Se… +1
- CVE-2026-12067AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlersGen Digital Avast Antivirus, Avast One, Avast Premium Se… +1
- CVE-2026-58141Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpointslanggenius dify
- CVE-2026-66986HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-123677xxyopen/201206030 novel Book Chapter Read BookServiceImpl.java getBookChapter authorizationxxyopen novel · 201206030 novel
- CVE-2026-90436Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionNameApache Software Foundation axis:axis · Apache Software F… +1
- CVE-2026-66987HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-66982HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-66984HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-123676xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorizationxxyopen novel · 201206030 novel
- CVE-2026-66981HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-21834HCL AION is affected by multiple security vulnerabilities.HCL Software HCL AION
- CVE-2026-123792Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Processsensiolabs symfony/yaml
- CVE-2026-123623Grida through 0.0.24 Missing Authorization in Forms File-Preview APIgridaco grida
- CVE-2026-123675OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injectionOpenBMB Internet of Agents
- CVE-2026-121880RStudio Server / Posit Workbench localhost port-proxy does not enforce per-session port ownershipPosit Software, PBC Posit Workbench · Posit Software, PBC R…
- CVE-2026-121881Posit Workbench code-server session-state RPC (get_last_seen) SQL injectionPosit Software, PBC Posit Workbench
- CVE-2026-123786Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret TokenAgenta-AI agenta
- CVE-2026-123785Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometryfluxbox
- CVE-2026-123784Fluxbox through 1.3.7 OS Command Injection via Style Background Valuesfluxbox
- CVE-2026-123783Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType BytecodeSkyvern-AI skyvern
- CVE-2026-123782ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequiredzhimaAi chatwiki
- CVE-2026-123624ChatWiki before 2.10.0 Cross-Tenant Fast Command Modification via saveFastCommandzhimaAi chatwiki
- CVE-2026-123622Usermin through 2.570 XSS via mailbox detach.cgi type Parameterwebmin usermin
- CVE-2026-123621Usermin through 2.570 Path Traversal File Write via detachall.cgiwebmin usermin
- CVE-2026-123620Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletionwebmin usermin
- CVE-2026-123619Lektor through 3.3.14 and 3.4.0b15 Path Traversal via Admin API Drive-Letter Pathslektor
- CVE-2026-123618ABP Framework before 10.7.1 Authentication Bypass via External Login Providerabpframework abp
- CVE-2026-123617Openwhyd before 1.65.1 NoSQL Injection via POST /api/useropenwhyd