CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-107457Memory corruption vulnerability in QMqttClient impacts Qt MQTTQt
- CVE-2026-18199Remote Code Execution VulnerabilityZohocorp ManageEngine Password Manager Pro · Zohocorp Manag…
- CVE-2026-101184Permission control vulnerability in the Bluetooth module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-101178Permission control vulnerability in the autofill service module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-103310PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment NotificationPayHere Payment Gateway
- CVE-2026-101177Permission control vulnerability in the Optimizer module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-101174DoS vulnerability in the DSoftBus module.Huawei HarmonyOS
- CVE-2026-101173DoS vulnerability in the DSoftBus module.Huawei HarmonyOS
- CVE-2026-101176Permission control vulnerability in the event notification management module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-101186DoS vulnerability in the window module.Huawei HarmonyOS
- CVE-2026-101185OOB read vulnerability in the peripheral module.Huawei HarmonyOS
- CVE-2026-101183UAF vulnerability in the location service module.Huawei HarmonyOS
- CVE-2026-101182Race condition vulnerability in the location service module.Huawei HarmonyOS
- CVE-2026-101181Permission control vulnerability in the WLAN module.Huawei HarmonyOS
- CVE-2026-101180DoS vulnerability in the file parsing module.Huawei HarmonyOS
- CVE-2026-101179Buffer overflow vulnerability in the file preview module.Huawei HarmonyOS
- CVE-2026-101175Null pointer dereference vulnerability in the ArkWeb module.Huawei HarmonyOS
- CVE-2026-101171Permission control vulnerability in the background task management module.Huawei HarmonyOS
- CVE-2026-101170DoS vulnerability in the file parsing module.Huawei HarmonyOS
- CVE-2026-101172Permission control vulnerability in the graphics module.Huawei HarmonyOS
- CVE-2026-120349dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injectiondayrui XunRuiCMS
- CVE-2024-5617Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force AttacksWSO2 API Manager · WSO2 Identity Server +2
- CVE-2025-11969Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative ActionsWSO2 API Manager · WSO2 Identity Server as Key Manager +7
- CVE-2026-120348dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injectiondayrui XunRuiCMS
- CVE-2026-120347dayrui XunRuiCMS Member View.php View sql injectiondayrui XunRuiCMS
- CVE-2026-120345WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injectionWAVLINK WN551X3-A
- CVE-2026-120344WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injectionWAVLINK WN551X3-A
- CVE-2026-120343mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scriptingmathurvishal CloudClassroom-PHP-Project
- CVE-2026-120342mathurvishal CloudClassroom-PHP-Project viewquery.php sql injectionmathurvishal CloudClassroom-PHP-Project
- CVE-2026-120341mathurvishal CloudClassroom-PHP-Project studentdetails.php redirectmathurvishal CloudClassroom-PHP-Project