CVEs
Browse the synced catalog, newest first.
- CVE-2026-124309Fraunhofer HHI VVdeC before 3.2.1 Heap Out-of-Bounds Read via SEIReader::xParseSEIScalableNestingfraunhoferhhi vvdec
- CVE-2026-124308Fraunhofer HHI VVdeC before 3.2.1 Use-After-Free via DecLibRecon::createSubPicRefBufsfraunhoferhhi vvdec
- CVE-2026-124307Fraunhofer HHI VVdeC before 3.2.1 Heap Use-After-Free via ALF APS Redefinitionfraunhoferhhi vvdec
- CVE-2026-99282net/sched: sch_teql: fix use-after-free on lower qdisc dropLinux
- CVE-2026-99281tun: Require CAP_NET_ADMIN to attach to an ownerless deviceLinux
- CVE-2026-99280ksmbd: drain session procfs readers before dropping table referencesLinux
- CVE-2026-99279ksmbd: reclaim ended sessions on logoff and expirationLinux
- CVE-2026-99278ksmbd: limit sessions on each connectionLinux
- CVE-2026-99277ksmbd: hold a connection reference for each session channelLinux
- CVE-2026-99276ksmbd: defer connection scavenging while session locks are busyLinux
- CVE-2026-99275smb: client: reject short SESSION_SETUP responsesLinux
- CVE-2026-99274smb: client: fix fiemap wild read on empty truncated responseLinux
- CVE-2026-99273ksmbd: reserve space for the UTF-16 terminator in stream infoLinux
- CVE-2026-99272smb: client: validate the data area in SMB2_read()Linux
- CVE-2026-99271ALSA: line6: Clear prev_fbuf on capture buffer releaseLinux
- CVE-2026-123988SililaWijesinghe Food Ordering System admin exposure of information through directory listingSililaWijesinghe Food Ordering System
- CVE-2026-123966Tenda AC19 saveParentControlInfo heap-based overflowTenda AC19
- CVE-2026-120984Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy importRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-123860WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-123964OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loopOpenBMB Internet of Agents
- CVE-2026-123861WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerabilityCrocoBlock JetFormBuilder – Hierarchical Select
- CVE-2026-120839WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerabilityMagepeople WpTravelly
- CVE-2026-120841WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerabilityMagepeople WpTravelly
- CVE-2026-121777WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerabilityCool Plugins Cool Formkit Lite
- CVE-2026-123467WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerabilityStylemixThemes Motors
- CVE-2026-122659WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerabilityWP ManageNinja Fluent Booking
- CVE-2026-121579WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2026-121575WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerabilityWP User Manager
- CVE-2026-122660WordPress FloristPress plugin <= 7.8.5 - Broken Access Control vulnerabilityBAKKBONE Australia FloristPress
- CVE-2026-123483WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerabilityCrocoblock JetFormBuilder