CVEs
Browse the synced catalog, newest first.
- GHSA-QX75-2P3R-PWM5LXD has project restriction bypass in instance copy across projectsgithub.com/canonical/lxd
- CVE-2026-55649GeoNode has Stored XSS in Documents metadata abstract fieldgeonode
- CVE-2026-46429GeoNode: Unrestricted File Uploadgeonode
- CVE-2026-33050GeoNode: OS command injection via uploaded file layer namegeonode
- GHSA-PJFF-C2WC-F6JMLXD has arbitrary file write on client due to trusted image hashgithub.com/canonical/lxd
- GHSA-FMC8-P6Q7-75CCLXD has argument injection in backup compression algorithm leading to AFW and ACEgithub.com/canonical/lxd
- GHSA-VGHH-5RFX-XHQ8LXD has arbitrary file read+write on host via rootfs/ symlink in malicious imagegithub.com/canonical/lxd
- CVE-2026-109683UPnP Newline Injection Vulnerability in TP-Link Archer BE805TP-Link Systems Archer BE805
- CVE-2026-124040CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header Statecivetweb
- CVE-2026-124039Gitleaks through 8.30.1 World-Readable Report Files via --report-pathgitleaks
- CVE-2026-124031GPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4gpac
- CVE-2026-124030GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replacegpac
- CVE-2026-124029Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Nameskopia
- CVE-2026-124028mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output ParsersEricLBuehler mistral.rs
- CVE-2026-124027ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePagezhimaAi chatwiki
- CVE-2026-124026Bar Assistant 6.0.0-rc1 before 6.11.0 Incorrect Authorization via Cocktail Copykarlomikus bar-assistant
- CVE-2026-124025Faveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/printfaveosuite faveo-helpdesk
- CVE-2026-19703A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially…SonicWall SonicOS
- CVE-2026-77709A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in…SonicWall SonicOS
- CVE-2026-77708A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in…SonicWall SonicOS
- CVE-2026-19868An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate…SonicWall SonicOS
- CVE-2026-123998Hisense VIDAA Smart TV MQTT Broker Authentication BypassHisense VIDAA
- CVE-2026-123997Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURIHisense VIDAA
- CVE-2026-123996Hisense VIDAA Smart TV UPnP/DLNA Missing AuthenticationHisense VIDAA
- CVE-2026-123995Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURIHisense VIDAA
- CVE-2026-123994Hisense VIDAA Smart TV DIAL Service Unauthenticated AccessHisense VIDAA
- CVE-2026-82308A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially…SonicWall SonicOS
- GHSA-JPF8-86F3-WP38LXD has arbitrary file read+write on host via templates/ symlink in malicious imagegithub.com/canonical/lxd
- CVE-2026-123993Hisense VIDAA Smart TV Unauthenticated WebDriver Remote AccessHisense VIDAA
- CVE-2026-107154A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially…SonicWall SonicOS