CVE-2026-47642 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-47295 - Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

CVE-2026-47290 - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-45756 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Fr

CVE-2026-45077 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Pr

CVE-2026-45074 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Fr

CVE-2026-45067 - ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (

CVE-2026-45066 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Fr

CVE-2026-45065 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Pr

CVE-2026-15757 - A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local

CVE-2026-15747 - Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CS

CVE-2026-15715 - A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-0515 - Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local a

CVE-2026-59891 - sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, ge

CVE-2026-59888 - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson

CVE-2026-59886 - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its manti

CVE-2026-59885 - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process

CVE-2026-59884 - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and

CVE-2026-59200 - Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/Pdf

CVE-2026-59197 - Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a n

CVE-2026-58647 - Improper neutralization of input during web page generation ('cross-site scripting') in Power BI all

CVE-2026-58644 - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to

CVE-2026-58640 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-58636 - Improper link resolution before file access ('link following') in Window PC Manager allows an author

CVE-2026-58635 - Improper neutralization of special elements used in a command ('command injection') in Windows Narra

CVE-2026-58631 - Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally

CVE-2026-58618 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-58614 - Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature loca

CVE-2026-58610 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-58609 - Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code l

CVE-2026-58608 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-58602 - Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges loc

CVE-2026-58601 - Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker

CVE-2026-58595 - Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unautho

CVE-2026-58526 - Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-58279 - Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a

CVE-2026-57979 - Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net

CVE-2026-57976 - Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s

CVE-2026-57969 - Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to el

CVE-2026-57107 - Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges

CVE-2026-57097 - Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature

CVE-2026-56193 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-56185 - Improper authentication in Windows Admin Center allows an authorized attacker to disclose informatio

CVE-2026-56170 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-56169 - Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges

CVE-2026-56164 - Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized a

CVE-2026-56155 - Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an

CVE-2026-55948 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55899 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-55144 - Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering l

CVE-2026-55014 - Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate priv

CVE-2026-55012 - Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code

CVE-2026-55011 - Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to exec

CVE-2026-55009 - Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elev

CVE-2026-55008 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex

CVE-2026-55006 - Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacke

CVE-2026-55005 - Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod

CVE-2026-55004 - Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally

CVE-2026-55003 - Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information

CVE-2026-55002 - External control of file name or path in SQL Server allows an authorized attacker to elevate privile

CVE-2026-55001 - Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate

CVE-2026-55000 - Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges wit

CVE-2026-54999 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54997 - Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l

CVE-2026-54996 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54995 - Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to ex

CVE-2026-54993 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-54992 - Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker

CVE-2026-54991 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54990 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code

CVE-2026-54989 - Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attack

CVE-2026-54988 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-54987 - Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil

CVE-2026-54986 - Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc

CVE-2026-54983 - Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a

CVE-2026-54982 - Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an una

CVE-2026-54433 - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS

CVE-2026-54432 - Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). The

CVE-2026-54132 - Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges w

CVE-2026-54129 - Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-54127 - Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

CVE-2026-54122 - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-54119 - Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unautho

CVE-2026-54118 - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a

CVE-2026-54117 - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a

CVE-2026-54114 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-54112 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54111 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54109 - Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker

CVE-2026-54108 - External control of file name or path in Microsoft Office SharePoint allows an authorized attacker t

CVE-2026-54107 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-54058 - Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA i

CVE-2026-50697 - Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver

CVE-2026-50696 - Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized at

CVE-2026-50695 - Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker

CVE-2026-50694 - Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to

CVE-2026-50678 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose inf

CVE-2026-50675 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-50663 - Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacke

CVE-2026-50653 - Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthori

CVE-2026-50652 - Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny

CVE-2026-50522 - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to

CVE-2026-50520 - Improper neutralization of special elements used in a command ('command injection') in Visual Studio

CVE-2026-50506 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-50384 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-50381 - Access of resource using incompatible type ('type confusion') in Composite Image File System Driver

CVE-2026-50364 - Improper link resolution before file access ('link following') in Windows Server Backup allows an au

CVE-2026-50356 - Concurrent execution using shared resource with improper synchronization ('race condition') in Micro

CVE-2026-50354 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50351 - Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to

CVE-2026-50350 - Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driv

CVE-2026-50342 - Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate priv

CVE-2026-50338 - Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges ove

CVE-2026-50333 - Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker

CVE-2026-50325 - Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall

CVE-2026-50323 - Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-50318 - Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

CVE-2026-50316 - Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to

CVE-2026-50311 - Improper access control in Windows Server allows an authorized attacker to elevate privileges locall

CVE-2026-50308 - Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute co

CVE-2026-50303 - Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authoriz

CVE-2026-50300 - Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose i

CVE-2026-50299 - Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to e

CVE-2026-50298 - Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate p

CVE-2026-50297 - Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall

CVE-2026-50296 - Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50295 - Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a sec

CVE-2026-50294 - Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows

CVE-2026-50293 - Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges loca

CVE-2026-49808 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49807 - Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized

CVE-2026-49806 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49805 - Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locall

CVE-2026-49804 - Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate pr

CVE-2026-49803 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49802 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49801 - Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l

CVE-2026-49800 - Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authori

CVE-2026-49799 - Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allo

CVE-2026-49798 - Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

CVE-2026-49797 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-49796 - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-49795 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49794 - Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker

CVE-2026-49793 - Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

CVE-2026-49792 - Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex

CVE-2026-49791 - Improper link resolution before file access ('link following') in Windows Routing and Remote Access

CVE-2026-49790 - Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-49789 - Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca

CVE-2026-49788 - Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to de

CVE-2026-49787 - Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized atta

CVE-2026-49784 - Concurrent execution using shared resource with improper synchronization ('race condition') in Micro

CVE-2026-49783 - Improperly implemented security check for standard in Windows Secure Boot allows an authorized attac

CVE-2026-49184 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-49183 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-49181 - Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to ele

CVE-2026-49180 - Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll)

CVE-2026-49178 - Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to exec

CVE-2026-49176 - Improper privilege management in Windows WalletService allows an authorized attacker to elevate priv

CVE-2026-49175 - Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall

CVE-2026-49174 - Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker

CVE-2026-49173 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49172 - Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code ov

CVE-2026-49171 - Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges local

CVE-2026-49170 - Insufficient granularity of access control in Windows StateRepository API allows an authorized attac

CVE-2026-49169 - Use after free in DNS Server allows an authorized attacker to execute code over a network.

CVE-2026-49168 - Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to e

CVE-2026-49167 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49166 - Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges loca

CVE-2026-49165 - Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclo

CVE-2026-49164 - Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to ex

CVE-2026-49162 - Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege

CVE-2026-48581 - Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to ele

CVE-2026-48572 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-48571 - Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-48564 - Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over

CVE-2026-48561 - Improper neutralization of special elements used in a command ('command injection') in Copilot Chat

CVE-2026-47632 - Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate pr

CVE-2026-47296 - Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

CVE-2026-47282 - Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized

CVE-2026-45646 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-45496 - Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code

CVE-2026-44806 - Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unaut

CVE-2026-44800 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-42990 - Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code

CVE-2026-42982 - Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized a

CVE-2026-42975 - Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu

CVE-2026-42900 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-41087 - Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author

CVE-2026-40422 - Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose inf

CVE-2026-40400 - Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a n

CVE-2026-40378 - Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (L

CVE-2026-36214 - osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS

CVE-2026-34349 - Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized att

CVE-2026-34348 - Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to discl

CVE-2026-34346 - Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock all

CVE-2026-34328 - Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an author

CVE-2026-33842 - Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author

CVE-2026-15703 - A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulner

CVE-2026-15702 - A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateC

CVE-2026-15701 - A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is

CVE-2026-15700 - A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the functi

CVE-2026-15429 - A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v

CVE-2026-15428 - An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitizat

CVE-2026-15427 - An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1

CVE-2026-14646 - Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP

CVE-2026-14645 - Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configure

CVE-2026-9636 - A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules

CVE-2026-9292 - A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. T

CVE-2026-9128 - A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search

CVE-2026-9127 - A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect au

CVE-2026-9108 - A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation

CVE-2026-7494 - Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retri

CVE-2026-62644 - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webm

CVE-2026-62643 - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS)

CVE-2026-62642 - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TN

CVE-2026-62641 - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of

CVE-2026-60119 - Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated atta

CVE-2026-60118 - Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that all

CVE-2026-60082 - DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When t

CVE-2026-60081 - DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column

CVE-2026-59841 - A improper restriction of communication channel to intended endpoints vulnerability in Fortinet Fort

CVE-2026-59840 - A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.

CVE-2026-59839 - A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo

CVE-2026-59837 - A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all

CVE-2026-59836 - A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, Fort

CVE-2026-59835 - A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, F

CVE-2026-59205 - Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, i

CVE-2026-59204 - Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumul

CVE-2026-59203 - Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImageP

CVE-2026-59199 - Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger

CVE-2026-59198 - Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its

CVE-2026-58461 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-55954 - Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover

CVE-2026-55651 - Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposu

CVE-2026-52841 - Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Google::oauth

CVE-2026-52840 - Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::conne

CVE-2026-52839 - Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 correctly filter p

CVE-2026-52838 - Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrato

CVE-2026-23573 - An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit

CVE-2026-15699 - A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function

CVE-2026-15698 - A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update/update

CVE-2026-15697 - A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on o

CVE-2026-15392 - DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrust

CVE-2026-14504 - An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/b

CVE-2026-12707 - Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to un

CVE-2026-12659 - A denial-of-service security issue exists in the affected products. The security issue stems from im

CVE-2026-12523 - Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (

CVE-2026-11944 - openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging s

CVE-2026-11917 - A path traversal security issue exists within Rockwell Automation ThinManager® software due to impro