CVEs
Browse the synced catalog, newest first.
- CVE-2026-95779An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager software.Hewlett Packard Enterprise (HPE) HPE Morpheus Software
- CVE-2026-95778A remote code execution vulnerability exists in HPE Morpheus Software.Hewlett Packard Enterprise (HPE) HPE Morpheus Software
- CVE-2026-124635kevquirk PureBlog Admin Image Upload Endpoint upload-image.php unrestricted uploadkevquirk PureBlog
- CVE-2026-124625PipraPay Admin Panel pp-functions.php deleteData sql injectionPipraPay
- CVE-2026-121841Other issue in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-121843Privilege escalation in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-121842Privilege escalation in the Reader View component in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-16283Command Injection in Osbil Technology's Ltd's oPanelOsbil Technology Ltd.Osbil Technology oPanel
- CVE-2026-119743pdfmake < 0.3.14 Shared Cache Access Policy Bypassbpampuch pdfmake
- CVE-2026-119274Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSSInfoblox NIOS
- CVE-2026-124624PipraPay pp-token anti-CSRF pp-adapter.php hash_hmac hard-coded credentialsPipraPay
- CVE-2026-119613AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal detailsash-project ash_ai · ash_ai
- CVE-2026-121611Gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loopRed Hat Enterprise Linux
- CVE-2026-121601Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice indexRed Hat Enterprise Linux
- CVE-2026-119610Gstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned…Red Hat Enterprise Linux
- CVE-2026-124623PipraPay ZIP Archive system-settings-import unrestricted uploadPipraPay
- CVE-2026-122673WordPress ShopEngine plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerabilityWpmet ShopEngine
- CVE-2026-112205Bruteforce Protection Bypass in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-112204Reflected XSS in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-110469Remote Code Execution via Unrestricted File Upload in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-110468Remote Code Execution via Unrestricted File Upload in WidzialniCMSFundacja Widzialni WidzialniCMS
- CVE-2026-124622olivier-ls PHP-FTS Storage.php open toctouolivier-ls PHP-FTS
- CVE-2026-112171SQL injection vulnerability in Magistra softwareGALENO SISTEMI MAGISTRA
- CVE-2026-112170Improper verification of downloaded upgradesGALENO SISTEMI MAGISTRA
- CVE-2026-112169Undocumented backdoor allows authentication bypass in Magistra softwareGALENO SISTEMI MAGISTRA
- CVE-2026-112168Multiple embedded secrets and weak algorithms in MagistraGALENO SISTEMI MAGISTRA
- CVE-2026-95648Privilege Escalation in C-Prot's C-Prot AppDefenseC-Prot AppDefense
- CVE-2026-124079rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue PoisoningrConfig Core · rConfig Pro
- CVE-2026-94434OS Command Injection Leading to Root Code Execution in TÜBİTAK BİLGEM's Pardus Boot RepairTÜBİTAK BİLGEM Software Technologies Research Institute Par…
- CVE-2026-120854WordPress iubenda plugin <= 3.13.6 - Denial of Service Attack vulnerabilityiubenda