CVEs
Browse the synced catalog, newest first.
- CVE-2026-125406Ettercap through 0.8.4.1 Stack Buffer Underwrite via Telnet Dissector Backspace Handlingettercap
- CVE-2026-125405Ettercap through 0.8.4.1 Out-of-Bounds Read via HTTP NTLM Authentication Parsingettercap
- CVE-2026-125404Ettercap through 0.8.4.1 Stack Buffer Overflow via WPA CCMP Decryptionettercap
- CVE-2026-125403Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_stsettercap
- CVE-2026-125402Ettercap through 0.8.4.1 Heap Out-of-Bounds Read via TLS SNI Parsingettercap
- CVE-2026-125401Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissectorettercap
- CVE-2026-125400Ettercap through 0.8.4.1 Use-After-Free via PCRE2 Filter Substitutionettercap
- CVE-2026-125399Fluxion before 6.39 OS Command Injection via Crafted SSIDFluxionNetwork fluxion
- CVE-2026-125398Instatic before 0.0.21 Authorization Bypass via Row Author Reassignment EndpointCoreBunch Instatic
- CVE-2026-125397NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Overridenocobase
- CVE-2026-125396Ghostscript before 10.08.0 -dSAFER Bypass via .putgstringcopy .forceput RecoveryArtifexSoftware ghostpdl
- CVE-2026-125395Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tagampache
- CVE-2026-125394FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache PointerFreeRDP
- CVE-2026-125393MailEnable Enterprise Premium before 10.62 Heap Overflow via IMAP X-FB-FETCHMailEnable Enterprise Premium
- CVE-2026-125392Webmin through 2.670 Stored XSS via BIND8 edit_recs.cgi ALL Viewwebmin
- CVE-2026-125391Webmin through 2.670 OS Command Injection via Samba User Account Optionswebmin
- CVE-2026-125390Group-Office before 6.8.181, 25.0.116, and 26.0.58 Local File Read via processUploadQueueIntermesh Group-Office
- CVE-2026-125389Group-Office before 6.8.181, 25.0.116, and 26.0.58 Stored XSS via filterXSS BypassIntermesh Group-Office
- CVE-2026-125388Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report DownloadIntermesh Group-Office
- CVE-2026-125387Faveo Helpdesk through 2.0.3 Cross-Department Ticket Tampering via TicketControllerfaveosuite faveo-helpdesk
- CVE-2026-125386langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpointsmoyangzhan langchain4j-aideepin
- CVE-2026-125385INDOTALENT WHMS before 10.20261109 Path Traversal via FileDocument/GetDocument and FileImage/GetImagego2ismail Asp.Net-Core-Inventory-Order-Management-System
- CVE-2026-125384INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeedergo2ismail Asp.Net-Core-Inventory-Order-Management-System
- CVE-2026-125383INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypassgo2ismail Asp.Net-Core-Inventory-Order-Management-System
- CVE-2026-125382Map-OS 5.0.0 to before 5.2.2 Privilege Escalation via /api/v1/usuariosRamonSilva20 mapos
- CVE-2026-125381DataRoom through 3.0.0 SQL Injection via MyBatisService.generateSqlgcpaas DataRoom
- CVE-2026-125380DataRoom through 3.0.0 Incorrect Authorization via /dataRoom/dataset/run/testgcpaas DataRoom
- CVE-2026-125379Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Readmovim
- CVE-2026-125378PowerDNS-Admin before 2026.11.0 Missing Authorization via Template Apply EndpointPowerDNS-Admin
- CVE-2026-125377Pig before 4.1.2 Missing Authorization Exposes OAuth2 Client Secrets via /clientpig-mesh pig