cve.now
by Sazabi
Check your stack
Agents
RSS
FAQ
All vulnerabilities
Loading vulnerabilities…
←
Back
All vulnerabilities
Browse the synced catalog, newest first. More entries load as you scroll.
Vulnerability set
All
Technology
All technologies
Package ecosystem
npm
PyPI
Go
Maven
crates.io
Packagist
RubyGems
NuGet
CVE-2026-110825
Kiloview E3 NDI Encoder Missing Authentication for Critical Function
High · 7.5
—
CVE-2026-92450
Kiloview E3 NDI Encoder Use of Hard-coded Credentials
High · 7.5
—
CVE-2026-110243
Kiloview E3 NDI Encoder OS Command Injection
Critical · 9.9
—
CVE-2026-107861
Kiloview E3 NDI Encoder OS Command Injection
Critical · 9.9
—
CVE-2026-110491
Kiloview E3 NDI Encoder NULL Pointer Dereference
High · 7.5
—
CVE-2026-105265
Kiloview E3 NDI Encoder Path Traversal
Medium · 5.3
—
CVE-2026-96616
Kiloview E3 NDI Encoder Insufficient Session Expiration
Medium · 6.5
—
CVE-2026-111100
Kiloview E3 NDI Encoder Missing Authentication for Critical Function
Medium · 5.3
—
CVE-2026-109122
Kiloview E3 NDI Encoder OS Command Injection
Critical · 9.1
—
CVE-2026-110063
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Critical · 10.0
—
CVE-2026-83938
Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
Critical · 10.0
—
CVE-2026-96185
Microsoft Exchange Online Remote Code Execution Vulnerability
High · 7.5
—
CVE-2026-97785
AAD App Proxy Elevation of Privilege Vulnerability
Critical · 10.0
—
CVE-2026-108456
Azure AI Foundry Elevation of Privilege Vulnerability
High · 7.7
—
CVE-2026-105014
Azure Pipelines Remote Code Execution Vulnerability
Critical · 9.1
—
CVE-2026-111594
InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information
High · 8.1
—
CVE-2026-114620
Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF
Medium · 5.4
—
CVE-2026-114619
Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens
Medium · 4.6
—
CVE-2026-114618
Authlib: Default JWT bearer grant accepts assertions for the wrong audience
Medium · 6.8
—
CVE-2026-114617
Authlib: ID token can disable its own nonce validation via the nonce_supported claim
Medium · 4.2
—
CVE-2026-115449
Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest
Low · 3.5
—
CVE-2026-114616
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
High · 7.4
—
CVE-2026-115221
Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership
Medium · 5.4
—
CVE-2026-115424
Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination
Medium · 5.5
—
CVE-2026-114615
Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys
High · 7.4
—
CVE-2026-114614
Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts
Low · 2.6
—
CVE-2026-114583
tar filter allows writing outside destination via empty-named symlink
Medium · 6.9
—
CVE-2026-114625
Security Advisory 0199
Critical · 9.9
—
CVE-2026-115417
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
High · 7.5
—
CVE-2026-115419
Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
High · 8.1
—
30 vulnerabilities loaded