by Kastro CVE-2026-63077 · JetBrains TeamCity
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,897 matching vulnerabilities · Page 118 of 778
JetBrains
Arista Networks
CVE-2026-16812 · Arista Networks VeloCloud Orchestrator On-Prem
VeloCloud Orchestrator OS Command Injection
CVE-2026-17191 · Arista Networks VeloCloud Orchestrator On-Prem
VeloCloud Orchestrator Flow Metrics API SQL Injection
pheditor
vBulletin
Unknown
CVE-2026-12394 · Unknown MemberGlut
MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
CVE-2026-13332 · Unknown Masteriyo LMS
Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)
CVE-2026-13597 · Unknown 微信二维码登陆
QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover
CVE-2026-13714 · Unknown Realtyna Organic IDX plugin + WPL Real Estate
Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
CVE-2026-14289 · Unknown FacturaONE para WooCommerce con VeriFactu
WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution
mitre
CVE-2025-50455 · mitre
SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1.
CVE-2021-32088 · mitre
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
CVE-2021-32086 · mitre
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
siyuan-note
CVE-2026-66395 · siyuan-note siyuan
SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol
CVE-2026-66396 · siyuan-note siyuan
SiYuan before v3.7.2 Stored XSS to RCE via title-img IAL
CVE-2026-66394 · siyuan-note siyuan
SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass
postcss
thorsten
Apache Software Foundation
CVE-2026-55971 · Apache Software Foundation Apache Thrift
Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()
CVE-2026-58023 · Apache Software Foundation Apache Thrift
Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
CVE-2026-58662 · Apache Software Foundation Apache Thrift
Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass
CVE-2026-48144 · Apache Software Foundation Apache Thrift
Apache Thrift: c_glib TLS Client Missing Hostname Verification
Apple
CVE-2026-43810 · Apple iOS and iPadOS
The issue was addressed with improved memory handling.
CVE-2026-64769 · Apple iOS and iPadOS
An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-64774 · Apple iOS and iPadOS
An integer overflow was addressed with improved input validation.
CVE-2026-43778 · Apple iOS and iPadOS
A use after free issue was addressed with improved memory management.
CVE-2026-43807 · Apple iOS and iPadOS
A buffer overflow was addressed with improved bounds checking.
CVE-2026-64775 · Apple iOS and iPadOS
A memory initialization issue was addressed with improved memory handling.
CVE-2026-43779 · Apple macOS
A logic issue was addressed with improved restrictions.
CVE-2026-64694 · Apple macOS
An integer overflow was addressed with improved input validation.
CVE-2026-64702 · Apple macOS
An access issue was addressed with additional sandbox restrictions.
CVE-2026-64703 · Apple macOS
A use after free issue was addressed with improved memory management.
CVE-2026-64738 · Apple iOS and iPadOS
A permissions issue was addressed with additional restrictions.
CVE-2026-64762 · Apple iOS and iPadOS
An out-of-bounds read was addressed with improved bounds checking.
Linux
CVE-2026-64535 · Linux Linux
nvmet-tcp: Fix potential UAF when ddgst mismatch
CVE-2026-64541 · Linux Linux
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
CVE-2026-64551 · Linux Linux
sctp: validate STALE_COOKIE cause length before reading staleness
CVE-2026-64534 · Linux Linux
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
joomshaper.com
CVE-2026-65879 · joomshaper.com SP Page Builder extension for Joomla
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1
CVE-2026-65766 · joomshaper.com SP Page Builder extension for Joomla
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1
CVE-2026-65876 · joomshaper.com SP Page Builder extension for Joomla
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0
RRWO
Christoph Vielgrader
CVE-2026-59533 · Christoph Vielgrader Relevanssi Light
WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerability
lookyloo
RomanCode
rtCamp
CVE-2026-59549 · rtCamp rtMedia for WordPress, BuddyPress and bbPress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
Ruben Garcia
CVE-2026-59538 · Ruben Garcia GamiPress
WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability
Strategy11 Team
CVE-2026-59550 · Strategy11 Team AWP Classifieds