CVEs
Browse the synced catalog, newest first.
- CVE-2026-107155A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could…SonicWall SonicOS
- GHSA-9J25-MM2H-2F76LXD has arbitrary file write on host via `exec-output` symlink in crafted imagegithub.com/canonical/lxd
- CVE-2026-119924Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name ParserAWS babelfish-for-postgresql · Amazon Aurora PostgreSQL wit…
- CVE-2026-123357GROBID is vulnerable to OS command injection through crafted PDF filenamesgrobidOrg grobid
- CVE-2026-122113CVE-2026-122113Realtek RtUsbA64.sys
- CVE-2026-90975CVE-2026-90975Realtek RtUsbA64.sys
- CVE-2026-119923Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin ParserAWS babelfish-for-postgresql · Amazon Aurora PostgreSQL wit…
- CVE-2026-123356GROBID: Unauthenticated `/api/modelTraining` Endpoint Allows Unbounded Thread Pool Creation (DoS)grobidOrg grobid
- CVE-2026-108262DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885ddev · github.com/ddev/ddev
- CVE-2026-84473CVE-2026-84473Kiteworks ownCloud
- CVE-2026-100082xen-blkback: Avoid UAF when reading I/O statisticsLinux
- CVE-2026-100081xen-netback: defer xenvif_mcast_addr_list_free()Linux
- CVE-2026-100080xen-netback: Fix UAF when reading statistics dataLinux
- CVE-2020-9709Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability.Adobe Photoshop
- CVE-2019-16447Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability.Adobe Illustrator CC
- CVE-2026-71495Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Accessopen-wanderer wanderer
- CVE-2026-62346Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTMLopen-wanderer wanderer
- CVE-2026-62345Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)open-wanderer wanderer
- CVE-2026-123976EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation SignalsTeunis van Beelen EDFbrowser
- CVE-2026-62344Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpointsopen-wanderer wanderer
- CVE-2026-75598Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitizationGradleUp shadow · com.gradleup.shadow:com.gradleup.shadow.g…
- CVE-2026-89017Skyline DataMiner BrokerGateway Embedded API Key Authentication BypassSkyline Communications DataMiner
- CVE-2026-123973SharePoint Products CopyMove before 2026-11-06 allows traversal.SharePoint Products CopyMove for SharePoint
- CVE-2026-119758ERPNext OCR 1.1.1 Path Traversal and SSRF via read_documentMonogramm erpnext_ocr
- CVE-2026-102650Nuxt Content: Unauthenticated SQLite Function DoS via Content Query APInuxt content · @nuxt/content
- CVE-2026-102356Kroki Mermaid companion SSRF via flowchart image URLsyuzutech kroki
- CVE-2026-123876Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncationRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-102359Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitivesyuzutech kroki
- CVE-2026-118670OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of documentOHIF Viewers · @ohif/extension-dicom-pdf
- CVE-2026-123824Symfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = truesensiolabs symfony/config