CVEs published May 15, 2026
211 CVEs were published on May 15, 2026: 16 critical, 84 high. 1 is now in CISA KEV.
- Published
- 211
- Critical
- 16
- High
- 84
- Medium
- 98
- Low
- 13
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 131
Most affected products
- open-webui
- 58
- Huawei HarmonyOS
- 9
- thorsten phpmyfaq · thorsten/phpmyfaq +1
- 8
- givanz Vvveb
- 7
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +3
- 6
- thorsten phpmyfaq · phpmyfaq/phpmyfaq +1
- 5
- Eugeny tabby
- 4
- Huawei HarmonyOS · Huawei EMUI
- 3
- OpenMage magento-lts · openmage/magento-lts
- 3
- AMD Radeon™ RX 6000 Series Graphics Products · AMD Radeo… +9
- 2
Critical 16
- CVE-2026-44551Open WebUI: LDAP Empty Password Authentication Bypassopen-webui
- CVE-2026-46364phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptchathorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2026-45010phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpointthorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2021-47965WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Uploadwp-super-edit WP Super Edit
- CVE-2026-42155Magento LTS: Weak API Session ID — Predictable MD5 of Time-Derived InputsOpenMage magento-lts · openmage/magento-lts
- CVE-2026-44717MCP Calculate Server: Prompt Injection to RCE611711Dark mcp_calculate_server
- CVE-2026-45035Tabby: RCE via `tabby://run` URL SchemeEugeny tabby
- CVE-2026-41258OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRangeopenmrs-core · org.openmrs.api:openmrs-api
- CVE-2026-44699LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMACbenmcollins libjwt
- CVE-2026-2031Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution.Google Cloud Internal Integration Platform APIs
- CVE-2026-41553Remote Code Execution in PDF Export ModuleDHTMLX PDF Export Module
- CVE-2026-41552Path Traversal in PDF Export ModuleDHTMLX PDF Export Module
- CVE-2026-7182Path Traversal in DiagramDHTMLX Diagram
- CVE-2026-5229Receive Notifications After Form Submitting – Form Notify for Any Forms <= 1.1.10 - Unauthenticated Authentication Bypass via LINE OAuth Callbackm615926 Receive Notifications After Form Submitting – Form…
- CVE-2026-8398A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434)AVB Disc Soft DAEMON Tools Lite
- CVE-2026-0481Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized chAMD Instinct™ MI210 · AMD Instinct™ MI250 +7
High 84
- CVE-2026-8700Crypt::DSA versions before 1.20 for Perl generate seeds using randTIMLEGGE Crypt::DSA
- CVE-2026-45338Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)open-webui
- CVE-2026-44549Open WebUI: Stored XSS in excel file previewopen-webui
- CVE-2026-45665Open WebUI: Stored XSS in Banner Component via Improper Sanitization Orderopen-webui
- CVE-2026-44565Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversalopen-webui
- CVE-2026-45314Open WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/imageopen-webui
- CVE-2026-45315Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionsopen-webui
- CVE-2026-45350Open WebUI: Chat completion API allows tool restrictions to be bypassedopen-webui
- CVE-2026-45303Open WebUI: Stored XSS via the HTML renedering viewopen-webui
- CVE-2026-45301Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded fileopen-webui
- CVE-2026-44570Open WebUI: Inconsistent authorization controls within memories APIopen-webui
- CVE-2026-44569Open WebUI: Insecure Message Access Breaks Authorizationopen-webui
- CVE-2026-44566Open WebUI: Arbitrary File Upload and Path Traversalopen-webui
- CVE-2026-44567Open WebUI: Open WebUI Improper Authorization Controlopen-webui
- CVE-2026-45672Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassedopen-webui
- CVE-2026-8696radare2 6.1.5 Use-After-Free via gdbr_pids_list()radare2
- CVE-2026-45400Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`open-webui
- CVE-2026-45402Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpointsopen-webui
- CVE-2026-45401Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpointsopen-webui
- CVE-2026-45398Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controlsopen-webui
- CVE-2026-45395Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Executionopen-webui
- CVE-2026-44721Open WebUI: Stored XSS via Model Descriptionopen-webui
- CVE-2026-44552Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoningopen-webui
- CVE-2026-44553Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Accessopen-webui
- CVE-2026-44554Open WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwriteopen-webui
- CVE-2026-44555Open WebUI: Base Model Routing Bypasses Access Control via Model Chainingopen-webui
- CVE-2026-44556Open WebUI: responses passthrough endpoint lacks access control authorizationopen-webui
- CVE-2026-45331Open WebUI: Full SSRF Vulnerability in the RAG Web Search Featureopen-webui
- CVE-2026-45349Open WebUI: Broken Access Control for Completions APIopen-webui
- CVE-2026-45399Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruptionopen-webui
- CVE-2026-45671Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletionopen-webui
- CVE-2026-45675Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accountsopen-webui
- CVE-2026-46408Vvveb: checkout IDOR allows unauthorized reuse of another user's cartgivanz Vvveb
- CVE-2026-46407Vvveb: admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokensgivanz Vvveb
- CVE-2026-45800Vvveb: Authenticated SQL injection in /user/orders via order_by and directiongivanz Vvveb
- CVE-2026-8686DoS from MQTT v5.0 Deserialization Fault in core MQTTFreeRTOS coreMQTT
- CVE-2026-44826Vvveb: Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totalsgivanz Vvveb
- CVE-2026-46367phpMyFAQ - Stored XSS via Utils::parseUrl() in Comment Renderingthorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2026-46366phpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypassthorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2026-46359phpMyFAQ - SQL Injection in CurrentUser::setTokenData via Unescaped OAuth Token Fieldsthorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2021-47966PHP Timeclock 1.04 SQL Injection via login.phpPHP Timeclock
- CVE-2021-47964Schlix CMS 2.2.6-6 Remote Code Execution via core.blockmanagerSchlix CMS
- CVE-2021-47959WordPress Plugin WPGraphQL 1.3.5 Denial of ServiceWPGraphQL
- CVE-2026-46474Trog::TOTP versions before 1.006 for Perl generate secrets using randTEODESIAN Trog::TOTP
- CVE-2026-8695radare2 6.1.5 Use-After-Free via gdbr_threads_list()radare2
- CVE-2026-44714bitcoinj: ScriptExecution P2PKH/P2WPKH Verification Bypassbitcoinj · org.bitcoinj:bitcoinj-core
- CVE-2026-45038Tabby: Dragging and Dropping a File into Tabby Can Lead to Code ExecutionEugeny tabby
- CVE-2026-45036Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zshEugeny tabby
- CVE-2026-45037Tabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocationEugeny tabby
- CVE-2026-45539Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project treemicrosoft apm · apm
- CVE-2026-44641Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during installmicrosoft apm · apm-cli
- CVE-2026-46508Turborepo: VSCode Extension command injectionvercel turborepo
- CVE-2026-35194Apache Flink: Remote code execution via SQL injection in code generationApache Software Foundation Apache Flink · org.apache.fli… +2
- CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logicLinux
- CVE-2026-41964Permission control vulnerability in the web.Huawei HarmonyOS
- CVE-2026-44088Remote Code Execution in SzafirHostKrajowa Izba Rozliczeniowa SzafirHost
- CVE-2026-6403Quick Playground <= 1.3.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameterdavidfcarr Quick Playground
- CVE-2026-6228Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Formshabti Frontend Admin by DynamiApps
- CVE-2026-4094FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletionrealmag777 FOX – Currency Switcher Professional for WooComm…
- CVE-2026-41702TOCTOU local privilege escalation vulnerabilityVMware Fusion
- CVE-2026-8654Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands Delphix Continuous data IBM Db2 Connector · Delphix Con… +10
- CVE-2026-28761Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier.Fujitsu Japan Limited Musetheque V4 Information Disclosure…
- CVE-2026-43490ksmbd: validate inherited ACE SID lengthLinux
- CVE-2025-54518Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructionAMD EPYC™ 7002 Series Processors · AMD Ryzen™ 4000 Seri… +10
- CVE-2024-36323Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized accAMD Radeon™ RX 7000 Series Graphics Products · AMD Radeo… +4
- CVE-2024-36333A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arAMD Radeon™ RX 5000 Series Graphics Products · AMD Radeo… +9
- CVE-2024-36334Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory toAMD Radeon™ RX 7000 Series Graphics Products
- CVE-2023-31317Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read orAMD Radeon™ RX 6000 Series Graphics Products · AMD Radeo… +4
- CVE-2025-54517Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.AMD Instinct™ MI250 · AMD Instinct™ MI308X +5
- CVE-2023-31316Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) couldAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ G… +16
- CVE-2026-2652Authentication Bypass in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2026-7373Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File LoadingRapid7 Metasploit Pro
- CVE-2024-21962Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in pAMD EPYC™ 4005 Series Processors · AMD EPYC™ 4004 Serie… +26
- CVE-2025-29935An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated pAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +3
- CVE-2025-29938An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory addressAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +2
- CVE-2025-0028An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary addressAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +3
- CVE-2025-29936Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentiAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +5
- CVE-2025-52540An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write OutAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +3
- CVE-2025-48519An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or wAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +3
- CVE-2026-0432Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalatiAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +43
- CVE-2025-48512Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attackAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +44
- CVE-2026-34253A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in r
- CVE-2026-38728An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtpsmtp-server
- CVE-2026-39054Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands.
Medium, low and unrated 111
- CVE-2026-8704Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modifiedTIMLEGGE Crypt::DSA
- CVE-2026-45299Open WebUI: Stored Cross-Site Scripting In Profile Pictureopen-webui
- CVE-2026-45667Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)open-webui
- CVE-2026-45316Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)open-webui
- CVE-2026-45317Open WebUI: Cross-Site Request Forgery (CSRF) via Image URL Manipulationopen-webui
- CVE-2026-45318Open WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)open-webui
- CVE-2026-44571Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permissionopen-webui
- CVE-2026-45345Open WebUI: Missing authorization check at the model update function - models from other users can be updatedopen-webui
- CVE-2026-45346Open WebUI: Stored Cross-Site Scripting in SVG Rendereropen-webui
- CVE-2026-45347Open WebUI: Blind server side request forgery (SSRF) via the PDF generate functionopen-webui
- CVE-2026-45351Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]open-webui
- CVE-2026-45666Open WebUI: Indirect Object Reference (IDOR) in user notesopen-webui
- CVE-2026-45365Open WebUI: Authenticated users can bypass model access control via exposed query parameteropen-webui
- CVE-2026-45386Open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpointopen-webui
- CVE-2026-45397Open WebUI: Unauthenticated RAG Configuration Disclosureopen-webui
- CVE-2026-45396Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulationopen-webui
- CVE-2026-45387Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)open-webui
- CVE-2026-45385Open WebUI: An IDOR vulnerability exists in the update_message_by_id API endpointopen-webui
- CVE-2026-44550Open WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accountsopen-webui
- CVE-2026-44557Open WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collectionopen-webui
- CVE-2026-44558Open WebUI: Channel Access Grants Bypass filter_allowed_access_grantsopen-webui
- CVE-2026-44559Open WebUI: Missing Access Check on Channel Members Endpoint for Standard Channelsopen-webui
- CVE-2026-44560Open WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector Searchopen-webui
- CVE-2026-44561Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channelsopen-webui
- CVE-2026-44562Open WebUI: Model Import Overwrites Any Model Without Ownership Checkopen-webui
- CVE-2026-44563Open WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/showopen-webui
- CVE-2026-44564Open WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IOopen-webui
- CVE-2026-44568Open WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Orderopen-webui
- CVE-2026-45339Open WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpointsopen-webui · open-webu
- CVE-2026-4053post edit time limit is not enforced on some post update operationsMattermost · github.com/mattermost/mattermost-server
- CVE-2026-45622Vvveb: Unauthenticated reflected XSS in public product return form via customer_order_idgivanz Vvveb
- CVE-2026-45616Vvveb: Stored XSS in Posts allows privilege escalation via post editorgivanz Vvveb
- CVE-2026-46365phpMyFAQ - Missing Authorization in Tag Deletion Endpointthorsten phpmyfaq · phpmyfaq/phpmyfaq +1
- CVE-2026-46363phpMyFAQ - Stored XSS in FAQ Question/Answer via Encode-Decode Bypassthorsten phpmyfaq · phpmyfaq/phpmyfaq +1
- CVE-2026-46362phpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission Checkthorsten phpmyfaq · phpmyfaq/phpmyfaq +1
- CVE-2026-46361phpMyFAQ - Stored Cross-Site Scripting via raw Filter in search.twigthorsten phpmyfaq · phpmyfaq/phpmyfaq +1
- CVE-2026-46360phpMyFAQ - Stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizerthorsten phpmyfaq · phpmyfaq/phpmyfaq +1
- CVE-2026-45009phpMyFAQ - Insufficient Authorization Check in Admin API Endpointsthorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2026-45008phpMyFAQ - Path Traversal in Client::deleteClientFolder via URL Parameterthorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2026-45007phpMyFAQ - Missing Permission Check on 12 Configuration API Endpoints Allows Information Disclosurethorsten phpmyfaq · thorsten/phpmyfaq +1
- CVE-2021-47968Podcast Generator 3.1 Persistent Cross-Site Scripting via long_descriptionPodcastgenerator Podcast Generator
- CVE-2021-47967PHP Timeclock 1.04 Multiple Cross-Site Scripting via ParametersPHP Timeclock
- CVE-2021-47963Anote 1.0 Persistent Cross-Site Scripting Leading to Code ExecutionAnotherNote Anote
- CVE-2021-47962Savsoft Quiz 5.0 Persistent Cross-Site Scripting via User Settingssavsofts Savsoft Quiz
- CVE-2021-47958CouchCMS 2.2.1 Server-Side Request Forgery via SVG uploadCouchCMS
- CVE-2026-44366Vvveb: Stored XSS via Comment Author Fieldgivanz Vvveb
- CVE-2026-4054SVG content served through Mattermost image proxy despite Content-Type restrictions causes client-side denial of serviceMattermost · github.com/mattermost/mattermost-server
- CVE-2026-44719Mathesar: Missing collaborator checks allowed access to database-scoped Mathesar metadatamathesar-foundation mathesar
- CVE-2026-44718Mathesar: Missing collaborator checks allowed access to saved explorations in other databasesmathesar-foundation mathesar
- CVE-2026-42207Magento LTS: Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` - magento-ltsOpenMage magento-lts · openmage/magento-lts
- CVE-2026-42458Magento LTS: Reflected XSS - Import -> Data Flow (profiles)OpenMage magento-lts · openmage/magento-lts
- CVE-2026-23695Cockpit CMS 2.14.0 Stored XSS via Set Field Display TemplateCockpit-HQ Cockpit · cockpit-hq/cockpit
- CVE-2026-44774Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=falsetraefik · github.com/traefik/traefik/v3 +2
- CVE-2026-41181Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page servicetraefik · github.com/traefik/traefik/v2 +2
- CVE-2026-44309gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commitssigstore gitsign · github.com/sigstore/gitsign
- CVE-2026-44310gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callerssigstore gitsign · github.com/sigstore/gitsign
- CVE-2026-46383Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`microsoft apm · apm-cli
- CVE-2026-45773Turborepo: Login callback CSRF/session fixationvercel turborepo · turbo
- CVE-2026-45772Turborepo: Unexpected local code execution during Yarn Berry detectionvercel turborepo · @turbo codemod +4
- CVE-2026-45803gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injectioncli · github.com/cli/cli/v2 +1
- CVE-2026-46483Vim: Command injection in tar#Vimuntar via missing shellescape {special} flagvim
- CVE-2026-45736ws: Uninitialized memory disclosurewebsockets ws · ws
- CVE-2025-14972Insufficient DPA countermeasure reseedingsilabs.com Simplicity SDK
- CVE-2026-8669Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF filesTONYC Imager
- CVE-2026-8503Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session idsGUIMARD Apache::Session::Generate::SHA256
- CVE-2026-8454Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF filesTONYC Imager::File::GIF
- CVE-2026-41970Out-of-bounds write vulnerability in the distributed file system module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-41969Permission control vulnerability in the projection module.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-41968Permission control vulnerability in the manufacturability design module.Huawei HarmonyOS
- CVE-2026-41967Permission control vulnerability in the manufacturability design module.Huawei HarmonyOS
- CVE-2026-41966Permission control vulnerability in the smart sensing service.Huawei HarmonyOS
- CVE-2026-41962Permission control vulnerability in the app management and control module.Huawei HarmonyOS
- CVE-2026-41961Permission control vulnerability in contacts.Huawei HarmonyOS
- CVE-2026-41960Permission control vulnerability in calls.Huawei HarmonyOS · Huawei EMUI
- CVE-2026-41971Permission control vulnerability in the security control module.Huawei HarmonyOS
- CVE-2026-41965Use-After-Free (UAF) vulnerability in the web.Huawei HarmonyOS
- CVE-2026-41963Stack overflow vulnerability in the media platform.Huawei HarmonyOS
- CVE-2026-7563Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actionstechlabpro1 Classified Listing – AI-Powered Classified ads…
- CVE-2026-8425Notify Odoo <= 1.0.1 - Cross-Site Request Forgery to Settings Updatepektsekye Notify Odoo
- CVE-2026-6415Advanced Custom Fields: Font Awesome Field <= 5.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via JSON Fieldjustinkruit Advanced Custom Fields: Font Awesome Field
- CVE-2026-4683Smartcat Translator for WPML <= 3.1.77 - Missing Authorization to Unauthenticated Plugin Settings Updatesmartcatai Smartcat Translator for WPML
- CVE-2026-7046NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.12 - Authenticated (Administrator+) SQL Injection via 'table' Parameterwebaways NEX-Forms – Ultimate Forms Plugin for WordPress
- CVE-2026-6646The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' ParameterDream-Theme The7 — Website and eCommerce Builder for WordPr…
- CVE-2026-24662Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier.Fujitsu Japan Limited Musetheque V4 Information Disclosure…
- CVE-2024-21950An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of establAMD Instinct™ MI300X · AMD Instinct™ MI300A +2
- CVE-2025-52532A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmdAMD Radeon™ PRO · AMD Instinct™ MI250 +5
- CVE-2026-0427Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to AMD Instinct™ MI210 · AMD Instinct™ MI300X +2
- CVE-2024-36332Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorizeAMD Radeon™ PRO
- CVE-2025-0044An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial losAMD Ryzen™ Al Max+ · AMD Ryzen™ AI 300 Series Processors +6
- CVE-2023-31309Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when expoAMD Radeon™ RX 6000 Series Graphics Products · AMD Radeo… +1
- CVE-2025-54511Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a functiAMD MI-25 · AMD Instinct™ MI250 +2
- CVE-2025-66660Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cAMD Radeon™ RX 6000 Series Graphics Products · AMD Radeo… +9
- CVE-2025-66664Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_IDAMD Radeon™ RX 6000 Series Graphics Products · AMD Radeo… +9
- CVE-2026-0428Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGSAMD Instinct™ MI300A · AMD Instinct™ MI300X +2
- CVE-2025-48516Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege toAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +29
- CVE-2022-23826A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race conditiAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ G… +17
- CVE-2021-26380A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range reAMD Ryzen™ 5000 Series Desktop Processors with Radeon™… +24
- CVE-2025-0040Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Gr… +2
- CVE-2025-29944A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resultingAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +12
- CVE-2025-29937An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory loAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +3
- CVE-2025-48513Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memoAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +4
- CVE-2025-48520An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics… +3
- CVE-2025-0045Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potAMD Athlon™ 3000 Series Mobile Processors with Radeon™… +38
- CVE-2025-48521Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) conditAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +35
- CVE-2024-36345Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an outAMD EPYC™ · AMD Ryzen™ 6000 Series Processors with Rade… +15
- CVE-2026-0438A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory.AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ G… +19
- CVE-2026-8612WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code executionOALDERS WWW::Mechanize::Cached
- CVE-2025-67031ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote Code Execution vulnerability in the partic
- CVE-2025-67437Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecure Permissions, which allows arbitrary user passwo
- CVE-2026-39052Oinone Pamirs 7.0.0 contains a code execution vulnerability via ScriptRunner.
- CVE-2026-39053Oinone Pamirs 7.0.0 contains an XML External Entity (XXE) issue in its XStream-based XML parsing logic.