CVEs
Browse the synced catalog, newest first.
- CVE-2026-20880Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an…Intel(R) Graphics Driver software installers
- CVE-2026-20798Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of…Intel(R) Graphics Driver software installers
- CVE-2026-20756Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an…Intel(R) Graphics Driver software installers
- CVE-2026-63651LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirectsPsychQuant livedocs
- CVE-2026-66335Heap Overflow in SmiVariable SMM HandlerAMI AptioV
- CVE-2026-66334OFBD SMM Write Validation IssuesAMI AptioV
- CVE-2026-66333OFBD SMM Read Validation IssuesAMI AptioV
- CVE-2026-66332OOB-Read in FmpCapsuleUpdateAMI AptioV
- CVE-2026-61547rabbitmq-c: Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODYalanxz rabbitmq-c
- CVE-2026-59986rabbitmq-c: amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read)alanxz rabbitmq-c
- CVE-2026-124251WordPress WPIDE – File Manager & Code Editor plugin <= 3.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityXplodedThemes WPIDE – File Manager & Code Editor
- CVE-2026-83528Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin…Ivanti Endpoint Manager Mobile
- CVE-2026-123180Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 modelsNETGEAR RAX30
- CVE-2026-123178Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350NETGEAR RBR350 · NETGEAR RBS350
- CVE-2026-107405An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to…Ivanti Endpoint Manager Mobile
- CVE-2026-107404Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin…Ivanti Endpoint Manager Mobile
- CVE-2026-105427Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with…Ivanti Endpoint Manager Mobile
- CVE-2026-97402In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of…Eclipse Foundation Eclipse Kura
- CVE-2026-105426Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with…Ivanti Endpoint Manager Mobile
- CVE-2026-123181A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with…Ivanti Sentry
- CVE-2026-123179An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4…Ivanti Sentry
- CVE-2026-124038Uncontrolled XML entity expansion in the Flock Installer app for AndroidFlock Installer app
- CVE-2026-105669Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with admin privileges…Ivanti Sentry
- CVE-2026-124037Information exposure in Flock Safety Platform public access-list sign-upFlock Safety Platform
- CVE-2026-105425OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0…Ivanti Sentry · Ivanti Endpoint Manager Mobile
- CVE-2026-124036Cross-organization access to saved-search alerts in FlockOSFlockOS
- CVE-2026-112191In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provided by…Eclipse Foundation Eclipse Kura
- CVE-2026-86336Apache TomEE: EJB method authorization is silently skipped on JDK 21+Apache Software Foundation org.apache.tomee:openejb-core
- CVE-2026-86531Apache TomEE: DoS via unbounded request body and multipart handling in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-87758Apache TomEE: Missing TLS hostname verification in ejbds client connectionsApache Software Foundation org.apache.openejb:openejb-clien…