CVEs published June 1, 2026
377 CVEs were published on June 1, 2026: 21 critical, 138 high. 1 is now in CISA KEV.
- Published
- 377
- Critical
- 21
- High
- 138
- Medium
- 197
- Low
- 21
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 118
Most affected products
- Google Android
- 60
- nextcloud security-advisories
- 26
- Qualcomm Snapdragon
- 22
- Apache Software Foundation Apache Airflow · apache-airflow
- 16
- kiteworks Secure Data Forms
- 8
- SOPlanning
- 7
- SourceCodester Pharmacy Sales and Inventory System
- 6
- Assimp
- 5
- itsourcecode Content Management System
- 5
- MediaTek chipset
- 5
Critical 21
- CVE-2026-25879Langroid has Prompt to SQL Injection, Leading to RCElangroid
- CVE-2026-40965Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure.Cloud Foundry Foundation uaa_release · Cloud Foundry Founda…
- CVE-2018-25427Arm Whois 3.11 Buffer Overflow via SEH OverwriteArmcode Arm Whois
- CVE-2026-9319IBM WebSphere Application Server is affected by a remote code execution vulnerabilityIBM WebSphere Application Server
- CVE-2026-9311IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
- CVE-2026-8644IBM WebSphere Application Server is affected by an identity spoofing vulnerabilityIBM WebSphere Application Server
- CVE-2026-0072In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check.Google Android XR
- CVE-2026-49121AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle DeserializationROCm aiter
- CVE-2026-45131CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requestsCloudPirates-io helm-charts
- CVE-2026-45132CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handlingCloudPirates-io helm-charts
- CVE-2026-44211Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerabilitycline
- CVE-2026-42672WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerabilityWP Directory Kit
- CVE-2026-0826Poly Voice – Possible Remote Control of Certain Poly DevicesHP poly_trio_8300 · HP poly_trio_8500 +2
- CVE-2026-42680WordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerabilityWasiliy Strecker / ContestGallery developer Contest Gallery…
- CVE-2026-42682WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerabilityTomdever wpForo Forum
- CVE-2026-48866WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerabilityRocketgenius Gravity Forms
- CVE-2026-48879WordPress AIWU plugin <= 1.4.17 - Privilege Escalation vulnerabilitySergey AIWU
- CVE-2026-8931Critical RCE vulnerability in Disig Web SignerDisig Web Signer
- CVE-2026-42252Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user patternApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-7858Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026xDassault Systèmes Teamwork Cloud - Standard Edition · Da… +3
- CVE-2026-48188SQL Injection via MySQL Quote MethodOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
High 138
- CVE-2026-25277Buffer Copy Without Checking Size of Input in Secure ProcessorQualcomm Snapdragon
- CVE-2026-25276Improper Validation of Array Index in Secure ProcessorQualcomm Snapdragon
- CVE-2026-25260Time-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceQualcomm Snapdragon
- CVE-2026-25259Out-of-bounds Write in DSP ServiceQualcomm Snapdragon
- CVE-2026-25258Out-of-bounds Read in DSP ServiceQualcomm Snapdragon
- CVE-2026-24092Improper Validation of Syntactic Correctness of Input in DisplayQualcomm Snapdragon
- CVE-2026-24091Improper Validation of Syntactic Correctness of Input in DisplayQualcomm Snapdragon
- CVE-2026-24090Missing Authentication for Critical Function in HLOSQualcomm Snapdragon
- CVE-2026-24089Improper Validation of Syntactic Correctness of Input in KernelQualcomm Snapdragon
- CVE-2026-24088Missing Authentication for Critical Function in BootQualcomm Snapdragon
- CVE-2026-24087Improper Validation of Syntactic Correctness of Input in KernelQualcomm Snapdragon
- CVE-2026-24085Stack-based Buffer Overflow in DisplayQualcomm Snapdragon
- CVE-2025-59606NULL Pointer Dereference in HLOSQualcomm Snapdragon
- CVE-2025-59605Out-of-bounds Write in HLOSQualcomm Snapdragon
- CVE-2025-59604NULL Pointer Dereference in SPS ApplicationsQualcomm Snapdragon
- CVE-2026-24782Kiteworks Secure Data Forms has a SQL Injection vulnerabilitykiteworks Secure Data Forms
- CVE-2026-24752Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks Secure Data Forms
- CVE-2019-25718Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode BypassDräger Infinity Explorer C700
- CVE-2026-10293UTT HiPER 1200GW formFireWall strcpy stack-based overflowUTT HiPER 1200GW
- CVE-2019-25716Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network PacketDräger Infinity Delta · Dräger Infinity Kappa
- CVE-2026-28580In multiple functions, there is a possible desync in persistence due to an incorrect bounds check.Google Android
- CVE-2026-28577In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Google Android
- CVE-2026-0100In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2026-0099In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in theGoogle Android
- CVE-2026-0098In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy.Google Android
- CVE-2026-0097In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error.Google Android
- CVE-2026-0096In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficGoogle Android
- CVE-2026-0095In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process duGoogle Android
- CVE-2026-0094In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to mislGoogle Android
- CVE-2026-0093In multiple locations, there is a possible misleading UI due to obfuscation.Google Android
- CVE-2026-0091In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user.Google Android
- CVE-2026-0089In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check.Google Android
- CVE-2026-0088In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficientGoogle Android
- CVE-2026-0087In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic Google Android
- CVE-2026-0078In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation.Google Android
- CVE-2026-0077In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the cGoogle Android
- CVE-2026-0076In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2026-0075In multiple functions, there is a possible way to access the contacts database due to a SQL injection.Google Android
- CVE-2026-0059In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow.Google Android
- CVE-2026-0045In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code.Google Android
- CVE-2026-0036In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Google Android
- CVE-2026-0009In multiple locations, there is a possible tapjacking due to a logic error in the code.Google Android
- CVE-2025-48652In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code.Google Android
- CVE-2025-48649In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass.Google Android
- CVE-2025-48595In multiple locations, there is a possible way to achieve code execution due to an integer overflow.Google Android
- CVE-2025-48570In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.Google Android
- CVE-2025-32348In multiple locations, there is a possible background activity launch due to a missing permission check.Google Android
- CVE-2025-26418In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account toGoogle Android
- CVE-2025-22426In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code.Google Android
- CVE-2025-22424In multiple locations, there is a possible way to reveal images across users due to improper input validation.Google Android
- CVE-2026-40964Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read Cloud Foundry Foundation log-cache_release · Cloud Foundry…
- CVE-2026-49491Pixa Bank 2.0 SQL Injection via agence-ajax.php APIPixastudio Pixa Bank
- CVE-2018-25434WP AutoSuggest 0.24 SQL Injection via autosuggest.phpeliekhoury WP AutoSuggest
- CVE-2018-25433Joomla JE Photo Gallery 1.1 SQL Injection via categoryidJoomlaextensions JE Photo Gallery
- CVE-2018-25432Arm Whois 3.11 Buffer Overflow via ASLR BypassArmcode Arm Whois
- CVE-2018-25431No-Cms 1.0 SQL Injection via order_by ParametergoFrendiAsgard No-CMS
- CVE-2018-25430Paroiciel 11.20 SQL Injection via eGeqIdEquipe ParameterParoiciel
- CVE-2018-25429Paroiciel 11.20 SQL Injection via zProIdPro ParameterParoiciel
- CVE-2018-25428Paroiciel 11.20 SQL Injection via tRecIdListe ParameterParoiciel
- CVE-2026-10292UTT HiPER 1200GW formTaskEdit strcpy stack-based overflowUTT HiPER 1200GW
- CVE-2026-49139Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl PoisoningHKUDS nanobot
- CVE-2026-49136Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.pyAnionex banana-slides
- CVE-2021-46747Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to mAMD Athlon™ 3000 Series Mobile Processors with Radeon™… +23
- CVE-2026-49135CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflowsteipete CodexBar
- CVE-2026-49134CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp Filesteipete CodexBar
- CVE-2026-24751Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks Secure Data Forms
- CVE-2026-43625CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirectsteipete CodexBar
- CVE-2026-47294Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-43624F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()SWivid F5-TTS
- CVE-2026-43623microtar 0.1.0 Stack-Based Buffer Overflow via raw_to_header()rxi microtar
- CVE-2026-9330IBM WebSphere Application Server is affected by remote code executionIBM WebSphere Application Server
- CVE-2026-9614An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain aIvanti Neurons for ITSM
- CVE-2026-7770IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i NavigatorIBM i Access Family
- CVE-2026-41013Tenant-controlled comma smuggles arbitrary CIFS mount optionsCloudFoundry Foundation smb-volume-release · CloudFoundry F…
- CVE-2026-43958Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of serviceRed Hat Enterprise Linux
- CVE-2026-45727CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletionCloakHQ CloakBrowser · cloakbrowser
- CVE-2026-45302Prototype Pollution in parse-nested-form-data via `__proto__` in FormData field namesmilamer parse-nested-form-data · parse-nested-form-data
- CVE-2024-52011launch-editor vulnerable to command injection via the crafted request on Windowsvitejs launch-editor · vitejs vite +2
- CVE-2026-45722Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Viewsnextcloud security-advisories
- CVE-2026-45545Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Executionnextcloud security-advisories
- CVE-2026-45281Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Updatenextcloud security-advisories
- CVE-2026-45156Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDCnextcloud security-advisories
- CVE-2026-8501CVE-2026-8501Symantec PC Tools Internet Security
- CVE-2026-46243smb: client: reject userspace cifs.spnego descriptionsLinux
- CVE-2022-4991Tychon is vulnerable to privilege escalation due to OPENSSLDIR locationTychon
- CVE-2026-10118Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationRed Hat Enterprise Linux · Red Hat AI Inference Server +2
- CVE-2026-10270D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflowD-Link DI-7001 MINI
- CVE-2026-42673WordPress Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin <= 3.3.6 - Sensitive Data Exposure vulnerabilityLogtivity Activity Logs Activity Logs, User Activity Tracki…
- CVE-2026-42674WordPress Advanced Access Manager plugin <= 7.1.0 - Bypass Vulnerability vulnerabilityAAM Plugin Advanced Access Manager
- CVE-2026-42675WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerabilityThemefic Hydra Booking
- CVE-2026-42677WordPress WP Document Revisions plugin <= 3.8.1 - Broken Access Control vulnerabilityBen Balter WP Document Revisions
- CVE-2026-42678WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP GiveWP
- CVE-2026-42681WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerabilityE2Pdf.com e2pdf
- CVE-2026-42683WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-48839WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP Statistics
- CVE-2026-48865WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerabilityThimPress LearnPress
- CVE-2026-42251Hard-coded credentials in KS-SOMEDKAMSOFT KS-SOMED
- CVE-2024-40646Vertex Vulnerable to Path Traversalvertex-app vertex
- CVE-2026-10259H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflowH3C Magic B0
- CVE-2026-40546Multiple SQL Injections in SOPlanningSOPlanning
- CVE-2026-40543Missing Authorization in SOPlanningSOPlanning
- CVE-2026-48827Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-gitApache Software Foundation Apache MINA SSHD · org.apache.ss…
- CVE-2026-9024Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xDassault Systèmes DELMIA Service Process Engineer
- CVE-2026-44825Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure usersApache Software Foundation Apache Solr · org.apache.solr:so…
- CVE-2026-49361Apache Fluss Netty Frame Decoder Memory Exhaustion VulnerabilityApache Software Foundation Apache Fluss · org.apache.fluss:…
- CVE-2026-40961Apache Airflow: Open Redirect Bypass VulnerabilityApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-41084Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutationApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-42359Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validatorApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-45360Apache Airflow: Arbitrary import in custom deadline-reference deserializationApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-49298Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsApache Software Foundation Apache Airflow · apache-airflow-…
- CVE-2026-42588Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnectorApache Software Foundation Apache ActiveMQ Broker · Apac… +4
- CVE-2026-45505Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper BypassApache Software Foundation Apache ActiveMQ Broker · Apac… +4
- CVE-2026-49157Apache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by defaultApache Software Foundation Apache ActiveMQ · org.apache.act…
- CVE-2026-32325Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.Fsas Technologies ServerView Agents for Windows
- CVE-2026-27788Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier.Fsas Technologies ServerView Agents for Windows
- CVE-2026-35563Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostnameApache Software Foundation Apache Directory LDAP API · org.…
- CVE-2026-48209Reflected XSS in authenticated agent contextOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2026-20455In geniezone, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20452In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow.MediaTek chipset
- CVE-2026-10206D-Link DI-8400 dbsrv.asp stack-based overflowD-Link DI-8400
- CVE-2025-70099A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial
- CVE-2026-37220FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent.
- CVE-2026-37221FlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding pending event.
- CVE-2026-37222FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages.
- CVE-2026-37223FlexRIC v2.0.0 contains a reachable assertion in the iApp message dispatcher.
- CVE-2026-37224FlexRIC v2.0.0 crashes when receiving a duplicate E2_SETUP_REQUEST from the same or spoofed E2 Node.
- CVE-2026-37225FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST with an empty ricEventTriggerDefinition field.
- CVE-2026-37226FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node.
- CVE-2026-37227FlexRIC v2.0.0 contains reachable assert(0) calls in stub message handlers for whitelisted but unimplemented E2AP message types in the near-
- CVE-2026-37228FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c).
- CVE-2026-37229FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails.
- CVE-2026-37230FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry.
- CVE-2026-37231FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields.
- CVE-2026-37232An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation.
- CVE-2026-37233FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism.
- CVE-2026-37234FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.
- CVE-2026-37235FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association.
- CVE-2026-38950An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files.
Medium, low and unrated 218
- CVE-2026-105141Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting1Panel-dev CordysCRM
- CVE-2026-10302itsourcecode Fees Management System manage_fee.php sql injectionitsourcecode Fees Management System
- CVE-2026-9048Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information ExposureRevolution Slider Slider Revolution
- CVE-2026-9050Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin DeactivationRevolution Slider Slider Revolution
- CVE-2026-10301itsourcecode Fees Management System index.php cross site scriptingitsourcecode Fees Management System
- CVE-2026-10300SGLang Inference HTTP Endpoint lora_manager.py assertionSGLang
- CVE-2026-10299code-projects Online Hospital Management System viewdoctortimings.php resource injectioncode-projects Online Hospital Management System
- CVE-2026-10298ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereferenceggml-org whisper.cpp
- CVE-2026-28511elabftw has entry title leakage through autocompletion searchelabftw
- CVE-2026-10297itsourcecode Fees Management System manage_course.php sql injectionitsourcecode Fees Management System
- CVE-2025-59614Out-of-bounds Write in Windows ComputeQualcomm Snapdragon
- CVE-2025-59613Stack-based Buffer Overflow in Windows ComputeQualcomm Snapdragon
- CVE-2025-59612Stack-based Buffer Overflow in Windows ComputeQualcomm Snapdragon
- CVE-2025-59611Out-of-bounds Write in Core ServicesQualcomm Snapdragon
- CVE-2025-59610Time-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverQualcomm Snapdragon
- CVE-2025-59609Buffer Over-read in WLAN Host CommunicationQualcomm Snapdragon
- CVE-2025-59601Exposure of Sensitive Information Through Metadata in Powerline Communication FirmwareQualcomm Snapdragon
- CVE-2026-10296itsourcecode Fees Management System ajax.php sql injectionitsourcecode Fees Management System
- CVE-2026-24761Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-24756Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-24755Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-24754Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks security-advisories
- CVE-2026-24753Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-10295SourceCodester Customer Review App review_app.py get_all_reviews denial of serviceSourceCodester Customer Review App
- CVE-2026-10294PackageKit API pk-transaction.c g_file_test improper authorizationPackageKit
- CVE-2026-28586In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass.Google Android
- CVE-2026-28581In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the cGoogle Android
- CVE-2026-28578In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation.Google Android
- CVE-2026-0086In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check.Google Android
- CVE-2026-0085In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation.Google Android
- CVE-2026-0080In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Google Android
- CVE-2026-0079In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Google Android
- CVE-2026-0074In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion.Google Android
- CVE-2026-0070In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input vaGoogle Android
- CVE-2026-0069In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion.Google Android
- CVE-2026-0067In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in Google Android
- CVE-2026-0061In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay aGoogle Android
- CVE-2026-0060In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root caGoogle Android
- CVE-2026-0056In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check.Google Android
- CVE-2026-0055In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid dirGoogle Android
- CVE-2026-0052In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Google Android
- CVE-2026-0051In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation.Google Android
- CVE-2026-0050In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass.Google Android
- CVE-2026-0048In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack.Google Android
- CVE-2026-0046In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attacGoogle Android
- CVE-2026-0044In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow.Google Android
- CVE-2026-0043In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Google Android
- CVE-2026-0042In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion.Google Android
- CVE-2026-0041In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow.Google Android
- CVE-2026-0040In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Google Android
- CVE-2026-0039In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Google Android
- CVE-2026-0018In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validationGoogle Android
- CVE-2026-0016In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a peGoogle Android
- CVE-2025-48648In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion.Google Android
- CVE-2025-48616In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic erroGoogle Android
- CVE-2018-25435ZeusCart 4.0 Deactivate Customer Accounts CSRFZeusCart
- CVE-2026-10291Enderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redosEnderfga claw-orchestrator · @enderfga/claw-orchestrator
- CVE-2026-10290code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injectioncode-projects Hotel and Tourism Reservation System
- CVE-2026-10289code-projects Hotel and Tourism Reservation System tour.php cross site scriptingcode-projects Hotel and Tourism Reservation System
- CVE-2026-10288code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authenticationcode-projects Hotel and Tourism Reservation System
- CVE-2026-49433DeepAI api.deepai.org/change_user_email CSRFapi.deepai.org
- CVE-2026-49140Nanobot < 0.2.1 Denial of Service via Matrix Media Download HandlerHKUDS nanobot
- CVE-2026-10287SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgerySourceCodester SEO Meta Tag Extractor
- CVE-2026-49138Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect FollowingHKUDS nanobot · nanobot-ai
- CVE-2026-10286CodeAstro Payroll System home_employee.php sql injectionCodeAstro Payroll System
- CVE-2026-5419Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalgnutls · Red Hat Enterprise Linux +6
- CVE-2026-10285DevaslanPHP project-management Ticket KanbanScrumHelper.php recordUpdated improper authorizationDevaslanPHP project-management
- CVE-2026-10284DevaslanPHP project-management Livewire ViewTicket.php doDeleteComment improper authorizationDevaslanPHP project-management
- CVE-2026-10283Bottelet DaybydayCRM Setting missing authenticationBottelet DaybydayCRM
- CVE-2026-10282Bottelet DaybydayCRM DocumentsController.php view improper authorizationBottelet DaybydayCRM
- CVE-2026-10281Enderfga claw-orchestrator API Endpoint embedded-server.ts EmbeddedServer missing authenticationEnderfga claw-orchestrator · @enderfga/claw-orchestrator
- CVE-2026-23638Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms
- CVE-2026-30963Capsule Namespace Hijacking via subresourceprojectcapsule capsule · github.com/projectcapsule/capsule
- CVE-2026-10280horizon921 mcpilot MCP API Call Endpoint route.ts server-side request forgeryhorizon921 mcpilot
- CVE-2026-40990Unbounded cache for function definitionsSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2026-40989Self Routing guard bypassed via function compositionSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2026-10279hiraishikentaro wezterm-mcp switch_pane/write_to_specific_pane wezterm_executor.ts os command injectionhiraishikentaro wezterm-mcp
- CVE-2026-22872Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerabilityprojectcapsule capsule · github.com/projectcapsule/capsule
- CVE-2026-10278ishayoyo excel-mcp read_file/write_file index.ts path traversalishayoyo excel-mcp
- CVE-2026-45729ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed inputthorvg
- CVE-2026-10277j3k0 mcp-google-workspace MCP Gmail Tool gmail.ts saveToDisk access controlj3k0 mcp-google-workspace
- CVE-2026-45810Nextcloud: Propfind requests for file comments allowed to load comments for other filesnextcloud security-advisories
- CVE-2026-45691Nextcloud: Bypass of second factor authentication on DAV endpointsnextcloud security-advisories
- CVE-2026-45690Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replaynextcloud security-advisories
- CVE-2026-45544Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewServicenextcloud security-advisories
- CVE-2026-45543Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files sharenextcloud security-advisories
- CVE-2026-10276hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgeryhekmon8 Jenkins-server-mcp
- CVE-2026-45286Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpointnextcloud security-advisories
- CVE-2026-45284Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticatenextcloud security-advisories
- CVE-2026-45285Nextcloud: Hidden Public Link creation when sharing to a Team External Membernextcloud security-advisories
- CVE-2026-45283Nextcloud: Files Lock app allows users to lock and unlock files of other usersnextcloud security-advisories
- CVE-2026-45282Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file accessnextcloud security-advisories
- CVE-2026-45279Nextcloud: Limited path traversal via template API if using `{lang}` in confignextcloud security-advisories
- CVE-2026-45278Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypassnextcloud security-advisories
- CVE-2026-45277Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associationsnextcloud security-advisories
- CVE-2026-45275Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approversnextcloud security-advisories
- CVE-2026-10275OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflowOpenSC
- CVE-2026-45267Nextcloud: Missing permission check for from submissionsnextcloud security-advisories
- CVE-2026-45266Nextcloud: Unauthorized force-mute from missing permission check when using internal signalingnextcloud security-advisories
- CVE-2026-45159Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share ownernextcloud security-advisories
- CVE-2026-45157Nextcloud: Valid share tokens allow to access tempory upload files of share ownernextcloud security-advisories
- CVE-2026-45155Nextcloud: Private circle can be added to another circle via APInextcloud security-advisories
- CVE-2026-45154Nextcloud: Improper Access Control in Collectivesnextcloud security-advisories
- CVE-2026-45153Nextcloud: PIN bypass in PassCodeActivity via back buttonnextcloud security-advisories
- CVE-2026-45264Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renamesnextcloud security-advisories
- CVE-2026-10274indrasishbanerjee aem-mcp-server Axios Request Flow mcp-server.ts getAssetMetadata server-side request forgeryindrasishbanerjee aem-mcp-server
- CVE-2026-10273php-censor Webhook Endpoint GitBuild.php os command injectionphp-censor
- CVE-2026-45701Sulu: Weak Cryptographical usage for API Key generation and Reset Tokenssulu · sulu/sulu
- CVE-2026-44740go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustiongo-git go-billy · github.com/go-git/go-billy/v5 +1
- CVE-2026-10272a4m4 Student-Management-System deleteform.php improper authorizationa4m4 Student-Management-System
- CVE-2026-10271a4m4 Student-Management-System Admin Endpoint admin redirecta4m4 Student-Management-System
- CVE-2026-42671WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerabilityPaolo GeoDirectory
- CVE-2026-42676WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerabilitymyCred
- CVE-2026-10269decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorizationdecolua 9router
- CVE-2026-42679WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerabilityMamunur Rashid Classified Listing
- CVE-2026-8643pip can extract console_scripts and gui_scripts outside installation directoryPython Packaging Authority pip · pip
- CVE-2026-10268janet-lang janet marsh.c unmarshal_one_fiber integer overflowjanet-lang janet
- CVE-2026-10267janet-lang janet debug.c doframe out-of-boundsjanet-lang janet
- CVE-2026-10265itsourcecode Content Management System edit_topic.php sql injectionitsourcecode Content Management System
- CVE-2026-10264lharries whatsapp-mcp Send API Endpoint main.go SendMessageRequest path traversallharries whatsapp-mcp
- CVE-2026-10263SourceCodester Computer Repair Shop Management System manage_product.php sql injectionSourceCodester Computer Repair Shop Management System
- CVE-2026-10262code-projects Real State Services Login loginuser.php sql injectioncode-projects Real State Services
- CVE-2026-10261CodeAstro Online Job Portal application_status.php sql injectionCodeAstro Online Job Portal
- CVE-2026-10533Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradationRed Hat OpenShift Container Platform
- CVE-2026-48559Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tagsepoupon lms
- CVE-2026-10260CodeAstro Online Job Portal delete-jobs.php sql injectionCodeAstro Online Job Portal
- CVE-2026-10258itsourcecode Content Management System add_sub_topic.php sql injectionitsourcecode Content Management System
- CVE-2026-10257itsourcecode Content Management System update_ss_img.php sql injectionitsourcecode Content Management System
- CVE-2026-10256itsourcecode Content Management System save_comment.php sql injectionitsourcecode Content Management System
- CVE-2026-10255SourceCodester Pharmacy Sales and Inventory System ShowForm.php sell_statement access controlSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-10254SourceCodester Pet Grooming Management Software admin file information disclosureSourceCodester Pet Grooming Management Software
- CVE-2026-10532Logback deserialization whitelist bypass for Proxy objectsQOS.CH Sarl logback · ch.qos.logback:logback-core
- CVE-2026-10253itsourcecode Online House Rental System manage_payment.php sql injectionitsourcecode Online House Rental System
- CVE-2026-9309Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injectionMozilla Firefox for iOS
- CVE-2026-9308Arbitrary JavaScript execution in Reader View due to wrong HTML replacement orderMozilla Firefox for iOS
- CVE-2026-10252itsourcecode Online House Rental System manage_tenant.php sql injectionitsourcecode Online House Rental System
- CVE-2026-34193GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()Imagination Technologies Graphics DDK
- CVE-2026-10251itsourcecode Online House Rental System ajax.php login sql injectionitsourcecode Online House Rental System
- CVE-2026-10250itsourcecode Online Blood Bank Management System campsdetails.php sql injectionitsourcecode Online Blood Bank Management System
- CVE-2026-10249itsourcecode Online Blood Bank Management System viewrequest.php sql injectionitsourcecode Online Blood Bank Management System
- CVE-2026-10248SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injectionSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-49328Apache Fesod (Incubating): Improper validation of user-supplied URLs leading to SSRFApache Software Foundation Apache Fesod · org.apache.fesod:…
- CVE-2026-10247SourceCodester Pharmacy Sales and Inventory System main create_generic_name cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-10246SourceCodester Pharmacy Sales and Inventory System main create_medicine_presentation cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-25600Credential Exposure Vulnerability in Trac PDBMTrac d.o.o. PDBM
- CVE-2026-10245SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-25599Missing authentication and clear‑text data transmission affecting Orca heat pumpsOrca Energy Orca heat pump · Orca Energy Orca user portal
- CVE-2026-10244SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scriptingSourceCodester Pharmacy Sales and Inventory System
- CVE-2026-40549Cross-Site Request Forgery in SOPlanningSOPlanning
- CVE-2026-40548Unrestricted Upload of File with Dangerous Type in SOPlanningSOPlanning
- CVE-2026-40547Path Traversal in SOPlanningSOPlanning
- CVE-2026-40545Reflected XSS in SOPlanningSOPlanning
- CVE-2026-40544Stored XSS in SOPlanningSOPlanning
- CVE-2026-10243code-projects Smart Parking System Admin Endpoint missing authenticationcode-projects Smart Parking System
- CVE-2026-10242itsourcecode Content Management System instructions.php sql injectionitsourcecode Content Management System
- CVE-2026-10241jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side request forgeryjeecgboot The server processes these URLs
- CVE-2026-10240JeecgBoot test server-side request forgeryJeecgBoot
- CVE-2026-10239JeecgBoot edit WordUtil.addImage server-side request forgeryJeecgBoot
- CVE-2026-40861Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandlerApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-40963Apache Airflow: DAG authorization bypass on /ui/structure/structure_dataApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-41014Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpointsApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-49267Apache Airflow: No certificate validation on SMTP STARTTLS connectionsApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-41017Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxyApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-42360Apache Airflow: Rendered template truncation bypasses nested sensitive-key maskingApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-42358Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secretsApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-8474Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.StormShield Network Security
- CVE-2026-45426Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log accessApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-46764Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filterApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-10237SourceCodester Water Billing Management System User Management manage_user sql injectionSourceCodester Water Billing Management System
- CVE-2026-48726Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout pathApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-10236SourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorizationSourceCodester Water Billing Management System
- CVE-2026-42253Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message PropertiesApache Software Foundation Apache ActiveMQ · org.apache.… +1
- CVE-2026-46605Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removalApache Software Foundation Apache ActiveMQ Broker · Apac… +2
- CVE-2026-49270Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)Apache Software Foundation Apache ActiveMQ Broker · Apac… +3
- CVE-2026-10235CodeAstro Ingredients Stock Management System stock_manager.php sql injectionCodeAstro Ingredients Stock Management System
- CVE-2026-10234Mettle sendportal Campaign webview cross site scriptingMettle sendportal
- CVE-2026-45192Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API ResponseApache Software Foundation Apache Airflow · apache-airflow
- CVE-2026-10233Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-boundsAssimp
- CVE-2026-10232Assimp ASE File scene.cpp ~aiNode use after freeAssimp
- CVE-2026-10231Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflowAssimp
- CVE-2026-10230Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflowAssimp
- CVE-2026-10229Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflowAssimp
- CVE-2026-10228raisulislamg4 student_management_system_by_php admission_form_check.php cross site scriptingraisulislamg4 student_management_system_by_php
- CVE-2026-10227raisulislamg4 student_management_system_by_php User Creation add_user_check.php sql injectionraisulislamg4 student_management_system_by_php
- CVE-2026-10226raisulislamg4 student_management_system_by_php delete.php sql injectionraisulislamg4 student_management_system_by_php
- CVE-2026-10225raisulislamg4 student_management_system_by_php Login login_check.php sql injectionraisulislamg4 student_management_system_by_php
- CVE-2026-10224NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumptionNousResearch hermes-agent · hermes-agent
- CVE-2026-10223NousResearch hermes-agent memory_tool.py _scan_memory_content injectionNousResearch hermes-agent · hermes-agent
- CVE-2026-10222NousResearch hermes-agent config.py _sanitize_env_lines injectionNousResearch hermes-agent · hermes-agent
- CVE-2026-10221NousResearch hermes-agent run_agent.py _compress_context injectionNousResearch hermes-agent · hermes-agent
- CVE-2026-48187Email with special content can lead to DoSOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2026-48189Bypass DedicatedAgentToCustomerGroups SettingOTRS AG OTRS
- CVE-2026-48190Incorrect handling of permissions in External Interface Config Item List moduleOTRS AG OTRS
- CVE-2026-48191Wrong Permission Handling in Document Search Article Meta FiltersOTRS AG OTRS
- CVE-2026-48208Denial-of-Service via SVG Rendering in TicketOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2026-10220NousResearch hermes-agent skills_tool.py skill_view injectionNousResearch hermes-agent
- CVE-2026-20456In wlan STA driver, there is a possible system crash due to a missing bounds check.MediaTek chipset
- CVE-2026-20454In geniezone, there is a possible out of bounds write due to a race condition.MediaTek chipset
- CVE-2026-20453In geniezone, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-10219nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injectionnextlevelbuilder GoClaw · github.com/nextlevelbuilder/goclaw
- CVE-2026-10218nextlevelbuilder GoClaw evolution_handlers.go auth improper authorizationnextlevelbuilder GoClaw
- CVE-2026-10217nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges managementnextlevelbuilder GoClaw
- CVE-2026-10216unitedbyai droidclaw claim Endpoint pairing.ts excessive authenticationunitedbyai droidclaw
- CVE-2026-10215Dolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorizationDolibarr ERP CRM · dolibarr/dolibarr
- CVE-2026-10214zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injectionzhayujie chatgpt-on-wechat
- CVE-2026-10213AstrBotDevs AstrBot API Endpoint delete path traversalAstrBotDevs AstrBot
- CVE-2026-10212AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorizationAstrBotDevs AstrBot · astrbot
- CVE-2026-10211AstrBotDevs AstrBot fs.py _normalize_rw_path authorizationAstrBotDevs AstrBot
- CVE-2026-10210AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injectionAstrBotDevs AstrBot
- CVE-2026-10209code-projects Online Hospital Management System Appointment appointmentdetail.php sql injectioncode-projects Online Hospital Management System
- CVE-2026-10208code-projects Online Hospital Management System login_1.php login_user sql injectioncode-projects Online Hospital Management System
- CVE-2026-10205Metasoft 美特软件 MetaCRM upload.jsp unrestricted uploadMetasoft 美特软件 MetaCRM
- CVE-2025-55664A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Se
- CVE-2025-60481A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.02.0 allows attackers
- CVE-2025-60483A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2
- CVE-2025-60485A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before 26.02.0 allows atta
- CVE-2025-60486A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a D
- CVE-2025-60495A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box before 26.02.0 allows at