CVE-2026-60173 - Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Securit

CVE-2026-60172 - Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform). Suppo

CVE-2026-60171 - Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supporte

CVE-2026-60170 - Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c

CVE-2026-60169 - Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c

CVE-2026-60168 - Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c

CVE-2026-60167 - Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (c

CVE-2026-60166 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-60165 - Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Enterpris

CVE-2026-60164 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-60163 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group R

CVE-2026-60162 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-60161 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-60160 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-60159 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-60158 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-60157 - Vulnerability in Oracle GoldenGate (component: Service Manager). Supported versions that are affect

CVE-2026-60156 - Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 2

CVE-2026-60155 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-60154 - Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component

CVE-2026-60153 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)

CVE-2026-60152 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane

CVE-2026-60150 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-60149 - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific

CVE-2026-60147 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-60146 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic

CVE-2026-60145 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz

CVE-2026-60144 - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific

CVE-2026-60143 - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific

CVE-2026-56816 - Netty is a network application framework for development of protocol servers and clients. Prior to 4

CVE-2026-56746 - Netty is a network application framework for development of protocol servers and clients. Versions 4

CVE-2026-56745 - Netty is a network application framework for development of protocol servers and clients. In version

CVE-2026-55851 - Netty is a network application framework for development of protocol servers and clients. In version

CVE-2026-47731 - The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS

CVE-2026-47709 - libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the

CVE-2026-47254 - libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sa

CVE-2026-47251 - libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8

CVE-2026-47247 - libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in lib

CVE-2026-47178 - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a cra

CVE-2026-47064 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz

CVE-2026-47063 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47062 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47061 - Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected

CVE-2026-47060 - Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected

CVE-2026-47059 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47058 - Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Or

CVE-2026-47057 - Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Or

CVE-2026-47056 - Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Ser

CVE-2026-47055 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47054 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47053 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47052 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Suppo

CVE-2026-47051 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu

CVE-2026-47050 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47049 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA

CVE-2026-47048 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Secu

CVE-2026-47047 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47046 - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte

CVE-2026-47045 - Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected

CVE-2026-47044 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47043 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47041 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The

CVE-2026-47040 - Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions th

CVE-2026-47039 - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec

CVE-2026-47038 - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte

CVE-2026-47037 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic

CVE-2026-47036 - Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval

CVE-2026-47035 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47034 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47033 - Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int

CVE-2026-47032 - Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Redwood UI). Supp

CVE-2026-47031 - Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Is

CVE-2026-47030 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47028 - Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite

CVE-2026-47027 - Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Or

CVE-2026-47026 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open

CVE-2026-47024 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane

CVE-2026-47023 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica

CVE-2026-47022 - Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security).

CVE-2026-47021 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47019 - Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog)

CVE-2026-47018 - Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C

CVE-2026-47017 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Proc

CVE-2026-47016 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish a

CVE-2026-47015 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA

CVE-2026-47014 - Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Securit

CVE-2026-47013 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47012 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz

CVE-2026-47011 - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Inte

CVE-2026-47010 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47009 - Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & At

CVE-2026-47008 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Suppo

CVE-2026-47007 - Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications (c

CVE-2026-47006 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-47005 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-47004 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-47003 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-47002 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-47001 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-47000 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46999 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46998 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46997 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46996 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46995 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46994 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46993 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46992 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46991 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46990 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46989 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46988 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46987 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46986 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46985 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46984 - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c

CVE-2026-46983 - Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component:

CVE-2026-46982 - Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component:

CVE-2026-46981 - Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applicat

CVE-2026-46980 - Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applicat

CVE-2026-46975 - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affecte

CVE-2026-46968 - Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle

CVE-2026-46954 - Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Remo

CVE-2026-46948 - Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applicat

CVE-2026-46943 - Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Pl

CVE-2026-46941 - Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Main

CVE-2026-46936 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL).

CVE-2026-46924 - Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.

CVE-2026-46923 - Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Su

CVE-2026-46917 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-46876 - Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.

CVE-2026-43947 - FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an unaut

CVE-2026-43946 - FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an autho

CVE-2026-43945 - FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.

CVE-2026-35290 - Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.

CVE-2026-35287 - Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.

CVE-2026-34316 - Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce

CVE-2026-21954 - Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (co

CVE-2026-21953 - Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (co

CVE-2026-16484 - A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vuln

CVE-2026-10680 - The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/

CVE-2026-10679 - The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock

CVE-2026-10678 - The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes

CVE-2026-10677 - The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy

CVE-2026-10675 - In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_rec

CVE-2026-10674 - The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFI

CVE-2026-8983 - Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that

CVE-2026-8982 - Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. T

CVE-2026-65058 - Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign

CVE-2026-65057 - Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticat

CVE-2026-65056 - mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to

CVE-2026-65055 - Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to

CVE-2026-65054 - MediaCMS 8.2.0 contains an information disclosure vulnerability that allows authenticated users to e

CVE-2026-64881 - The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow int

CVE-2026-64822 - djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPassword

CVE-2026-64821 - djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that al

CVE-2026-63764 - LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vuln

CVE-2026-63358 - FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the

CVE-2026-63140 - Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipula

CVE-2026-63139 - Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Al

CVE-2026-63136 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exces

CVE-2026-63092 - kirby-modules through 5.5.7, fixed in commit 315417e, contains an information disclosure vulnerabili

CVE-2026-63080 - Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backe

CVE-2026-56147 - Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized inform

CVE-2026-52476 - SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive informa

CVE-2026-52475 - Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive

CVE-2026-52474 - An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUti

CVE-2026-52472 - SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the

CVE-2026-52470 - SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via t

CVE-2026-52469 - SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via t

CVE-2026-47714 - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline

CVE-2026-47708 - MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3,

CVE-2026-47697 - Shelf is a platform for tracking physical assets. Shelf is multi-tenant; data is isolated per organi

CVE-2026-47695 - CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game.

CVE-2026-47690 - MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions o

CVE-2026-47689 - FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version

CVE-2026-47688 - FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version

CVE-2026-47687 - FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version

CVE-2026-47685 - FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version

CVE-2026-47237 - Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clust

CVE-2026-47143 - Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer de

CVE-2026-46556 - FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.

CVE-2026-45383 - libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a

CVE-2026-45382 - libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decode

CVE-2026-44879 - A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authe

CVE-2026-44878 - A vulnerability in the web-based management interface of an ECOS device could allow a highly privile

CVE-2026-30633 - Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc

CVE-2026-30631 - An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11

CVE-2026-16318 - The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n

CVE-2026-16317 - Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an

CVE-2026-12139 - Tanium addressed an information disclosure vulnerability in Connect.

CVE-2026-11925 - Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Ta

CVE-2026-65069 - Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file an

CVE-2026-65068 - Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file an

CVE-2026-65067 - Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and ope

CVE-2026-65066 - Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and

CVE-2026-65065 - Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file

CVE-2026-65064 - Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and op

CVE-2026-65063 - Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and

CVE-2026-65062 - Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and

CVE-2026-65061 - Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and ope

CVE-2026-64880 - Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL que

CVE-2026-64879 - A filename supplied during file upload is not properly sanitized before being used in system command

CVE-2026-64878 - Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument

CVE-2026-64617 - Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and ope

CVE-2026-64616 - Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and op

CVE-2026-64615 - Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open

CVE-2026-64614 - Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open

CVE-2026-64613 - Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and ope

CVE-2026-59147 - Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an

CVE-2026-59146 - Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unv

CVE-2026-59145 - Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot,

CVE-2026-59144 - Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalida

CVE-2026-59143 - Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via an unvalid

CVE-2026-56852 - A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

CVE-2026-56146 - Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entity Analytic

CVE-2026-56145 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exces

CVE-2026-56144 - Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited inde

CVE-2026-50759 - An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /stat

CVE-2026-50758 - Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to

CVE-2026-50757 - Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to e

CVE-2026-50756 - An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive informat

CVE-2026-50755 - An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive informat

CVE-2026-49092 - Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized in

CVE-2026-47671 - Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0,

CVE-2026-47667 - CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the

CVE-2026-46600 - Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the messa

CVE-2026-46403 - Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `

CVE-2026-42397 - Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of ser

CVE-2026-30632 - Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the c

CVE-2026-15957 - Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers fr

CVE-2026-64877 - An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access

CVE-2026-63454 - An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vuln

CVE-2026-63453 - Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitati

CVE-2026-59142 - Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated a

CVE-2026-59141 - Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated no

CVE-2026-59140 - Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated no

CVE-2026-59139 - Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated ar

CVE-2026-55084 - DHIS2 is a flexible information system for data capture, management, validation, analytics and visua

CVE-2026-55082 - DHIS2 is a flexible information system for data capture, management, validation, analytics and visua

CVE-2026-55081 - DHIS2 is a flexible information system for data capture, management, validation, analytics and visua

CVE-2026-16441 - In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superc

CVE-2026-12548 - A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an intege

CVE-2026-12547 - SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority

CVE-2016-20096 - Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnera

CVE-2026-56583 - HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthoriz

CVE-2026-56582 - HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerab

CVE-2026-56581 - HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorize

CVE-2026-56580 - HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow a

CVE-2026-56579 - HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misu