CVEs
Browse the synced catalog, newest first.
- CVE-2026-120856WordPress Invoice Gateway for WooCommerce – Invoice Payment Gateway plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerabilityRymera Web Invoice Gateway for WooCommerce – Invoice Paymen…
- CVE-2026-118798Multiple sensitive authentication data exposedCompuGroup Medical Wingesfar
- CVE-2026-118795AIS stores authorization state in locally modifiable databasesCompuGroup Medical Infantia · CompuGroup Medical Profim +1
- CVE-2026-118792Default ODBC credentialsCompuGroup Medical Wingesfar
- CVE-2026-118791Insecure software update mechanismCompuGroup Medical Wingesfar
- CVE-2026-118790Multiple Hardcoded CredentialsCompuGroup Medical Wingesfar
- RUSTSEC-2026-0464`webhook_commands` was removed from crates.io for malicious codewebhook_commands
- RUSTSEC-2026-0465`electrumd` was removed from crates.io for malicious codeelectrumd
- RUSTSEC-2026-0469`env-test-guard` was removed from crates.io for malicious codeenv-test-guard
- RUSTSEC-2026-0470`gabby-types-sec` was removed from crates.io for malicious codegabby-types-sec
- CVE-2026-118468AIS XML parsers allow external entity resolutionCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118467AIS products expose clinical and personal data via logs and telemetryCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118465AIS products use vendor-wide hard-coded database credentialsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118464AIS shared cryptographic services use fixed cryptographic secretsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118462AIS update mechanism executes unverified codeCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118461AIS PersonnelService client performs unauthenticated doctor-specific operationsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118460AIS embedded private keys enable practitioner impersonationCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118459AIS PasswordSOS permits authentication without legitimate credentialsCompuGroup Medical Infantia · CompuGroup Medical Profim +2
- CVE-2026-118458AIS shared test login provider contains fixed administrative credentialsCompuGroup Medical Phronesis · CompuGroup Medical Venere
- CVE-2026-118450Venere loads replaceable unsigned components from a writable installation locationCompuGroup Medical Venere
- CVE-2026-112172Unauthenticated SQL Execution in XDent/XMedical Synchronization InfrastructureCompuGroup Medical XDent · CompuGroup Medical XMedical
- CVE-2026-121629Gst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handlingRed Hat Enterprise Linux
- CVE-2026-124684This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character…Samsung Open Source Escargot
- CVE-2026-124621kongxin-github Java_Library_Management_System Swing UI Layer MainInterface.java Landing.sureadmin improper authorizationkongxin-github Java_Library_Management_System
- CVE-2026-123460WordPress WordPress File Upload plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerabilityNickboss WordPress File Upload
- CVE-2026-122661WordPress Directorist plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerabilitywpWax Directorist
- CVE-2026-121722WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.5 - Broken Access Control vulnerabilityWP E-Signature Formidable Forms Signature Online Contract A…
- CVE-2026-119515WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerabilityMamunur Rashid Radius Booking — Booking Calendar for Appoin…
- CVE-2026-122665WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilityKitae Park Mang Board WP
- CVE-2026-122666WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilityKitae Park Mang Board WP