CVEs
Browse the synced catalog, newest first.
- CVE-2025-62621Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2026-92441Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-92439The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-96437The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer…Kong Gateway Enterprise
- CVE-2026-92443The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-121898Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121896Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121913Adobe Connect | Incorrect Authorization (CWE-863)Adobe Connect
- CVE-2026-121908Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121352Adobe Connect | Incorrect Authorization (CWE-863)Adobe Connect
- CVE-2026-121912Adobe Connect | Cross-site Scripting (XSS) (CWE-79)Adobe Connect
- CVE-2026-121887Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Connect
- CVE-2026-121350Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121349Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
- CVE-2026-121910Adobe Connect | Cross-site Scripting (XSS) (CWE-79)Adobe Connect
- CVE-2026-121900Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121355Adobe Connect | Incorrect Authorization (CWE-863)Adobe Connect
- CVE-2026-121351Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
- CVE-2026-121889Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Connect
- CVE-2026-121894Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121356Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Connect
- CVE-2026-121906Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
- CVE-2026-121353Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93)Adobe Connect
- CVE-2026-121904Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2026-121890Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Connect
- CVE-2026-121902Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121354Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
- CVE-2026-121892Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Connect
- CVE-2026-122102Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2026-105150Product Filter for WooCommerce by WBW <= 3.4.5 - Reflected Cross-Site Scripting via 'text_no_products' Parameterwoobewoo Product Filter for WooCommerce by WBW