CVEs
Browse the synced catalog, newest first.
- CVE-2026-97040Cgo directive injection via .syso files disguised as Go object files in cmd/go and cmd/linkGo toolchain cmd/go · Go toolchain cmd/link +1
- CVE-2026-97041Host linker flag injection via //go:cgo_ directives in cmd/compile and cmd/linkGo toolchain cmd/compile · Go toolchain cmd/link +1
- CVE-2026-97042Linker flag injection via cgo_import_dynamic and PE DLL names in cmd/cgo, cmd/compile, and cmd/linkGo toolchain cmd/cgo · Go toolchain cmd/compile +2
- CVE-2026-97043Unexpected code execution via escaped quotes in //go:cgo_ldflag in cmd/go and cmd/compileGo toolchain cmd/go · Go toolchain cmd/compile +1
- CVE-2026-116645LimeSurvey Community Edition 7.8.0 - SQL injection via Archive AttributesLimeSurvey Community Edition
- CVE-2026-63660node-fontnik: integer-overflow heap out-of-bounds write in RenderSDFmapbox node-fontnik
- CVE-2026-126571Padloc 4.0.0 before 4.3.1 Email MFA Code Brute Force via retrieveMFATokenpadloc
- CVE-2026-126570Padloc 4.0.0 before 4.3.1 Prototype Pollution via SCIM PATCH setPath()padloc
- CVE-2026-126569Mbin 1.2.1 before 1.11.1 Stored XSS via Markdown Image Nested in LinkMbinOrg mbin
- CVE-2026-126567Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via Special:Ask Debug OutputSemanticMediaWiki
- CVE-2026-126566Semantic MediaWiki 7.3.1 before 7.4.1 Incorrect Authorization via Edit Protection AnnotationsSemanticMediaWiki
- CVE-2026-126565Semantic MediaWiki 3.0.0 before 7.4.1 DoS via Exponential Concept ExpansionSemanticMediaWiki
- CVE-2026-126564Semantic MediaWiki 2.5.0 before 7.4.1 Stored XSS via Special:Browse Factbox TitleSemanticMediaWiki
- CVE-2026-126563Semantic MediaWiki 2.4.0 before 7.4.1 Reflected XSS via Special:Ask Date FormatSemanticMediaWiki
- CVE-2026-126562Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreterSemanticMediaWiki
- CVE-2026-126561Semantic MediaWiki 2.5.0 before 7.4.1 Missing Authorization via Is edit protected AnnotationSemanticMediaWiki
- CVE-2026-126560Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via data-search AttributesSemanticMediaWiki
- CVE-2026-126559Semantic MediaWiki 4.2.0 before 7.4.1 Stored XSS via Special:FacetedSearchSemanticMediaWiki
- CVE-2026-63194Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV importbahmni-core
- CVE-2026-63192Bahmni-Core: Exfiltration of patient data stored in Bahmni through SQL injection through boolean blind and error based exfilbahmni-core
- CVE-2026-126546Viber for iOS through 29.4.0.24 Denial of Service via Malformed GIFRakuten Viber Viber for iOS
- CVE-2026-126545WWBN AVideo through 29.7.1 Missing Authorization via get_api_tags APIWWBN AVideo
- CVE-2026-126544WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()WWBN AVideo
- CVE-2026-126543WWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.phpWWBN AVideo
- CVE-2026-126542WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social LoginWWBN AVideo
- CVE-2026-126541WWBN AVideo through 29.7.1 Missing Authorization via Live Restream EndpointsWWBN AVideo
- CVE-2026-126539Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interfacedirectus
- CVE-2026-126499Jellyfin before 12.0 Path Traversal via Library VirtualFolders Endpointsjellyfin
- CVE-2026-126498WriteFreely before 0.17.3 Stored XSS via Unsanitized Post SlugMusing Studio WriteFreely
- CVE-2026-126497LibreCAD through 2.2.1.6 Heap Out-of-Bounds Write via dwgReader18::parseDataPageLibreCAD