by Kastro CVE-2026-16232 · checkpoint Quantum Security Management
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,897 matching vulnerabilities · Page 121 of 778
checkpoint
CVE-2026-62144 · checkpoint Quantum Security Management
Management Authentication Bypass and Privilege Escalation
mitre
CVE-2026-52439 · mitre
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflectio…
CVE-2025-50329 · mitre
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary cod…
cascadiawebservices
CVE-2026-15015 · cascadiawebservices MountDev AI MCP Connector for WordPress
MountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint
Fujitsu
rtcamp
CVE-2026-14282 · rtcamp GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more
GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field
emarket-design
CVE-2026-15011 · emarket-design Customer Support Ticket System & Helpdesk
Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter
netty
n8n-io
Oracle Corporation
CVE-2026-60366 · Oracle Corporation Oracle Platform Security for Java
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).
CVE-2026-60367 · Oracle Corporation Oracle Platform Security for Java
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).
CVE-2026-60372 · Oracle Corporation Oracle Platform Security for Java
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).
CVE-2026-60369 · Oracle Corporation Oracle Platform Security for Java
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).
CVE-2026-61233 · Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration).
CVE-2026-61245 · Oracle Corporation PeopleSoft Enterprise FIN Manufacturing Brazil
Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration).
CVE-2026-61242 · Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing).
CVE-2026-61235 · Oracle Corporation PeopleSoft Enterprise HCM Global Payroll Switzerland
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Swi…
CVE-2026-61237 · Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration).
CVE-2026-61239 · Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement).
CVE-2026-62546 · Oracle Corporation Oracle Applications Framework
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).
CVE-2026-61238 · Oracle Corporation PeopleSoft Enterprise FIN Common Objects Argentina
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement).
CVE-2026-61244 · Oracle Corporation PeopleSoft Enterprise FIN Manufacturing Argentina
Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufacturing).
CVE-2026-62549 · Oracle Corporation Oracle HRMS (UK)
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).
CVE-2026-61223 · Oracle Corporation Oracle Communications Converged Application Server
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security).
regularlabs.com
CVE-2026-65431 · regularlabs.com GeoIP extension for Joomla
Joomla Extension - regularlabs.com - Zipslip in GeoIP extension
CVE-2026-64796 · regularlabs.com Sourcerer extension for Joomla
Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension
CVE-2026-64873 · regularlabs.com Cache Cleaner Pro extension for Joomla
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension
CVE-2026-64874 · regularlabs.com Cache Cleaner Pro extension for Joomla
Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension
CVE-2026-64793 · regularlabs.com Articles Anywhere extension for Joomla
Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions
CVE-2026-64798 · regularlabs.com IP Login extension for Joomla
Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension
Alibaba
Dell
CVE-2026-40712 · Dell PowerProtect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.
CVE-2026-46738 · Dell PowerProtect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API.
EverPress
q2a
Xpoda Türkiye Informatics Technology Inc.
CVE-2026-2395 · Xpoda Türkiye Informatics Technology Inc. No Code Platform
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
joomlack.fr
CVE-2026-63048 · joomlack.fr Page Builder CK extension for Joomla
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2
MightyNetworks vs BuddyBoss
CVE-2026-59514 · MightyNetworks vs BuddyBoss Buddyboss Platform
WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability
MongoDB
Roland Barker
CVE-2026-59525 · Roland Barker Participants Database
WordPress Participants Database plugin <= 2.7.8.3 - SQL Injection vulnerability
CVE-2026-16424 · Google Chrome
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer proc…
CVE-2026-16419 · Google Chrome
Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perfor…
CVE-2026-16414 · Google Chrome
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially…
CVE-2026-16416 · Google Chrome
Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape…
Ninja Forms
CVE-2026-57784 · Ninja Forms Ninja Forms File Uploads Extension