CVEs
Browse the synced catalog, newest first.
- CVE-2026-124863Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124862Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124861Sandbox escape due to use-after-free in the Audio/Video: cubeb componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124860Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124859Sandbox escape due to incorrect boundary conditions in the Storage: Cache API componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124858Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124857Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124856Incorrect boundary conditions in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124855Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124854Privilege escalation in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124853Sandbox escape due to incorrect boundary conditions in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-82509V Programming Language net.http TLS Certificate Validation Bypassvlang v
- CVE-2026-12708Unbounded HTTP/3 Datagram flow map growth in tokio-quicheCloudflare tokio-quiche
- CVE-2026-124747Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file sizeRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-125744Missing permission check in ticket layout APIpretix
- CVE-2026-100962NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side…NVIDIA Nemo Deploy
- CVE-2026-125871MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichmentmisp-modules
- CVE-2026-16478Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installerTÜBİTAK BİLGEM Software Technologies Research Institute par…
- CVE-2026-125745WCK before 2.4.1 Missing Authorization via wck_show_update_form AJAXmadalinungureanu Custom Post Types and Custom Fields creato…
- CVE-2026-121267Incorrect Default Permissions Vulnerability in TÜBİTAK BİLGEM's eta-remoteTÜBİTAK BİLGEM Software Technologies Research Institute eta…
- CVE-2026-1257427-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction7-Zip
- CVE-2026-101275Insufficient validation of payment status in pretix-adyenpretix-adyen
- RUSTSEC-2026-0483`lwd-uri-util` was removed from crates.io for malicious codelwd-uri-util
- CVE-2026-121191Improper Access Control Vulnerability in TÜBİTAK BİLGEM's eta-remoteTÜBİTAK BİLGEM Software Technologies Research Institute eta…
- CVE-2026-120350Stored Cross-Site Scripting in the Vaadin Rich Text Editor via an Unescaped Video Embedcom.vaadin:vaadin · com.vaadin:vaadin-core +3
- CVE-2026-120326Unescaped Download File Name Allows Content-Disposition Parameter Injection in Vaadin Flowcom.vaadin:vaadin · com.vaadin:vaadin-core +1
- CVE-2026-12266Authenticated Broken Access ControlZohocorp DDI Central
- CVE-2026-112137A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions…Siemens Mendix Studio Pro
- CVE-2026-112136A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions…Siemens Mendix Studio Pro
- CVE-2026-109830A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01).Siemens meta-iot2050