CVEs
Browse the synced catalog, newest first.
- CVE-2026-122664WordPress Broadcast Live Video plugin <= 7.3.14 - Cross Site Scripting (XSS) vulnerabilityVideoWhisper.com Broadcast Live Video
- CVE-2026-123482WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-121612WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.6.2 - Broken Authentication vulnerabilityWPZOOM WPBruiser {no- Captcha anti-Spam}
- CVE-2026-115340Insecure Storage of Web Transfer Credentials in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115339Unauthenticated XFT Memory Exhaustion in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115341Unauthorized File Disclosure via Path Traversal in Thin Client Web Transfer in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115337Folder Permission Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115336FTP Quota Accounting Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-115338Insecure XFT Transport in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2026-112165Disabled TLS Certificate Validation Enables MITM Attackslaservideo lasergest
- CVE-2026-121690CVE-2026-121690FrodoBots EarthRover Mini+ firmware
- CVE-2026-121689CVE-2026-121689FrodoBots EarthRover Mini+ firmware
- CVE-2026-121688CVE-2026-121688FrodoBots EarthRover Mini+ firmware
- CVE-2026-121687CVE-2026-121687FrodoBots EarthRover Mini+ firmware
- CVE-2026-121686CVE-2026-121686FrodoBots EarthRover Mini+ firmware
- CVE-2026-121685CVE-2026-121685FrodoBots EarthRover Mini+ firmware
- CVE-2026-114594Time-of-check time-of-use (TOCTOU) race condition in Sandisk Dashboard InstallerSandisk Dashboard
- CVE-2026-112164Hardcoded AES Key Enables Credential Disclosurelaservideo lasergest
- CVE-2026-103906Disabled TLS Certificate Validation Enables MITM Attacksam_automatic_machines am_club
- CVE-2026-124683Eclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in the opt-in…Eclipse Foundation Eclipse Langium
- CVE-2026-118492In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-escape diagnostic messages before rendering them in…Eclipse Foundation Eclipse Langium
- CVE-2025-10248XSS vulnerability in OpenText FilrOpenText Filr
- CVE-2026-124959Nmaslib Hnswlib and Spotify Voyager HNSW Index Deserialization Heap Out-of-Bounds WriteSpotify Voyager · hnswlib
- CVE-2026-124916PrestaShop Performance Debug Configuration PHP Code InjectionPrestaShop
- CVE-2026-124850SQL Injection in Database Migration via Stored Connector Identifiers in flowintelflowintel
- CVE-2026-104620PackageKit/ZYpp local privilege escalation using InstallFiles(SIMULATE)PackageKit
- CVE-2026-124249`http.cookiejar` applies expired `Set-Cookie` to cookie store before policy validationPython Software Foundation CPython
- CVE-2026-119474Privilege Escalation in HAVELSAN's Liman Render EngineHAVELSAN Liman Render Engine
- CVE-2026-19552ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identityPython Software Foundation CPython
- CVE-2026-124636kevquirk PureBlog Page Editor content.php save_page path traversalkevquirk PureBlog