CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-91893Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability.Dell Alienware Command Center
- CVE-2026-119739Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTRNexbox A95X · Amlogic Android SDK
- CVE-2026-119738Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()Nexbox A95X · Amlogic Android SDK
- CVE-2026-119737Amlogic pppoe_wrapper Command Injection via AF_UNIX SocketNexbox A95X · Amlogic Android SDK
- CVE-2026-120689Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted FileThe HDF Group HDF5
- CVE-2026-102435Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Fieldthemefic Ultra Addons for Contact Form
- CVE-2026-120067psqlODBC stack buffer overflow copying ctid and oid values for updatable cursorsPostgreSQL psqlODBC
- CVE-2026-120066psqlODBC log files are created with default permissions at a predictable path and follow symbolic linksPostgreSQL psqlODBC
- CVE-2026-120065psqlODBC does not escape a server-supplied column name in its updatable-cursor queriesPostgreSQL psqlODBC
- CVE-2026-120064psqlODBC does not validate column numbers and row indexes in binding and descriptor functionsPostgreSQL psqlODBC
- CVE-2026-120063psqlODBC stack buffer overflow when quoting long schema and table namesPostgreSQL psqlODBC
- CVE-2026-120062psqlODBC SQL injection through SQLSpecialColumns table and schema namesPostgreSQL psqlODBC
- CVE-2026-120061psqlODBC ODBC escape parser stack buffer overflowPostgreSQL psqlODBC
- CVE-2026-120060psqlODBC does not validate server-supplied counts and lengthsPostgreSQL psqlODBC
- CVE-2026-120059psqlODBC uses a server-supplied column name as a format stringPostgreSQL psqlODBC
- CVE-2026-120058psqlODBC row cache overflow when a later FETCH changes the column countPostgreSQL psqlODBC
- CVE-2026-120057psqlODBC large-object read overflows the application bufferPostgreSQL psqlODBC
- CVE-2026-120497Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsAWS aidlc-traceability
- CVE-2026-119736Attendo Admin Android 3.0.13 Hard-coded MQTT Broker CredentialsAttendo
- CVE-2026-105606Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8joomlaboat.com Custom Tables extension for Joomla
- CVE-2026-119735Munshi XSS via Purchase Inquiry Thread RenderingPetpooja Munshi
- CVE-2026-119734Munshi IDOR via Purchase Inquiry Thread EndpointPetpooja Munshi
- CVE-2026-119733Munshi Missing Authorization in Company Deletion APIPetpooja Munshi
- CVE-2026-119732Munshi Broken Object Level Authorization via Invoice Deletion APIPetpooja Munshi
- CVE-2026-119731Munshi Payment Bypass via Unauthenticated Webhook EndpointPetpooja Munshi
- CVE-2026-120656CVE-2026-120656OpenKruise kruise-manager
- CVE-2026-105605Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3dj-extensions.com DJ-Classifieds extension for Joomla
- CVE-2026-105604Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3dj-extensions.com DJ-Classifieds extension for Joomla
- CVE-2026-105603Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3dj-extensions.com DJ-Classifieds extension for Joomla
- CVE-2026-81938Arbitrary file read via Alertmanager receiver configuration in Grafana MimirGrafana Enterprise Metrics · Grafana Mimir