CVEs
Browse the synced catalog, newest first.
- CVE-2026-1264961Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}1Panel-dev CordysCRM
- CVE-2026-126495MQTTX through 1.13.3 Stored XSS via Topic Tree and JSON Tree Tooltipsemqx MQTTX
- GHSA-6856-87HX-P5X7Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege VulnerabilityMicrosoft.TestPlatform.CLI
- CVE-2026-126188Active Storage: Possible local file disclosure in Active Storage video previews and analysisrails
- CVE-2026-20183ISE Authorization Bypass vulnerabilityCisco Identity Services Engine Software
- CVE-2026-126187React: Unauthenticated Remote Code Execution in React Server Componentsreact · react-server-dom-parcel +2
- CVE-2024-36309Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Serie… +48
- CVE-2026-126261A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5…Fortinet FortiManager
- CVE-2025-0008Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in…AMD EPYC™ 7003 Series Processors · AMD EPYC™ 7002 Series… +7
- CVE-2025-48504Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7
- CVE-2025-29941Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7
- CVE-2026-0003Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +4
- CVE-2026-0435Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1
- CVE-2026-123084Python-pulpcore: pulpcore: header content guard jq filter exposes the content-app environmentRed Hat Ansible Automation Platform · Red Hat Satellite +2
- CVE-2026-0454An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global…AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1
- CVE-2026-0480Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1
- CVE-2026-28248Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-28247Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-28249Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization (SEV)…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +5
- CVE-2026-40668Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to request…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-40669An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to corrupt the…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +5
- CVE-2026-40670Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-90834UART wide-data syscall verifiers check the 8-bit driver op, allowing a user-mode thread to trigger a NULL function-pointer call in kernel…zephyrproject zephyr
- CVE-2026-90833Signed offset bypasses bounds check in simulated EEPROM driver, allowing out-of-bounds kernel memory read and write from user modezephyrproject zephyr
- CVE-2026-77685Bluetooth Classic RFCOMM: integer underflow in the MCC TEST command handler leads to out-of-bounds read disclosed to the peer and…zephyrproject zephyr
- CVE-2026-87042Zephyr PTP: unvalidated Delay_Resp message interval lets an on-link peer wedge the PTP thread and flood the networkzephyrproject zephyr
- CVE-2026-82391Out-of-bounds write in Zephyr HTTP/2 server static-filesystem handler via corrupted receive-buffer lengthzephyrproject zephyr
- CVE-2026-90832Out-of-bounds read in Bluetooth Host periodic advertising report reassembly due to unvalidated report lengthzephyrproject zephyr
- CVE-2026-67177Chargemap stored XSSChargemap
- CVE-2026-67176Chargemap open redirectChargemap