by Kastro CVE-2026-65008 · getgrav grav
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,897 matching vulnerabilities · Page 127 of 778
getgrav
mitre
CVE-2026-30631 · mitre
An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbit…
CVE-2026-52469 · mitre
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file
CVE-2026-52470 · mitre
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file
CVE-2026-52472 · mitre
SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file
CVE-2025-66390 · mitre
In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication) is enabled in Ten…
CVE-2026-50755 · mitre
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value
Apache Software Foundation
CVE-2026-64606 · Apache Software Foundation Apache Fory
Apache Fory, Apache Fory: Class-registration bypass through an auto-admitted SerializedLambda capturing interface
CVE-2026-64608 · Apache Software Foundation Apache Fory
Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths
CVE-2026-64609 · Apache Software Foundation Apache Fory
Apache Fory, Apache Fory: Out-of-Bounds Read via sun.misc.Unsafe in zero-copy java deserialization
Mozilla
CVE-2026-16357 · Mozilla Firefox
Incorrect boundary conditions in the Graphics component
CVE-2026-16382 · Mozilla Firefox
Mitigation bypass in the DOM: Service Workers component
CVE-2026-16388 · Mozilla Firefox
Sandbox escape in the DOM: Networking component
CVE-2026-16389 · Mozilla Firefox
Incorrect boundary conditions, integer overflow in the Libraries component in NSS
CVE-2026-16395 · Mozilla Firefox
Integer overflow in the Audio/Video component
CVE-2026-16402 · Mozilla Firefox
Integer overflow in the Graphics: ImageLib component
CVE-2026-16353 · Mozilla Firefox
Invalid pointer in the DOM: Bindings (WebIDL) component
CVE-2026-16407 · Mozilla Firefox
Mitigation bypass in the DOM: Service Workers component
CVE-2026-16363 · Mozilla Firefox
JIT miscompilation in the JavaScript: WebAssembly component
CVE-2026-16369 · Mozilla Firefox
Integer overflow in the JavaScript: WebAssembly component
CVE-2026-16350 · Mozilla Firefox
Incorrect boundary conditions in the Audio/Video: cubeb component
CVE-2026-16351 · Mozilla Firefox
Sandbox escape due to use-after-free in the DOM: Navigation component
CVE-2026-16352 · Mozilla Firefox
Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-16355 · Mozilla Firefox
JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-16356 · Mozilla Firefox
Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-16367 · Mozilla Firefox
Sandbox escape due to invalid pointer in the Disability Access APIs component
CVE-2026-16368 · Mozilla Firefox
Incorrect boundary conditions in the JavaScript: WebAssembly component
CVE-2026-16377 · Mozilla Firefox
Mitigation bypass in the PDF Viewer component
CVE-2026-16383 · Mozilla Firefox
Mitigation bypass in the DOM: Networking component
CVE-2026-16392 · Mozilla Firefox
JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-16393 · Mozilla Firefox
Incorrect boundary conditions in the Graphics: WebGPU component
CVE-2026-16364 · Mozilla Firefox
Incorrect boundary conditions in the Audio/Video: Playback component
CVE-2026-16370 · Mozilla Firefox
Mitigation bypass in the DOM: Networking component
CVE-2026-16394 · Mozilla Firefox
Mitigation bypass in the DOM: Security component
CVE-2026-16406 · Mozilla Firefox
Mitigation bypass in the Networking component
CVE-2026-16349 · Mozilla Firefox
Same-origin policy bypass in the DOM: Navigation component
CVE-2026-16358 · Mozilla Firefox
Site isolation issue in the Graphics: WebRender component
CVE-2026-16375 · Mozilla Firefox
Site isolation issue in the Networking: HTTP component
CVE-2026-16380 · Mozilla Firefox
Mitigation bypass in the Networking component
CVE-2026-16387 · Mozilla Firefox
Site isolation issue in the Networking component
CVE-2026-16390 · Mozilla Firefox
Mitigation bypass in the Enterprise Policies component
CVE-2026-16359 · Mozilla Firefox
Incorrect boundary conditions in the Audio/Video: GMP component
CVE-2026-16381 · Mozilla Firefox
Same-origin policy bypass in the Networking: DNS component
hassantafreshi
CVE-2026-13439 · hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder
Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint
Turkmesh Communication Services Inc.
CVE-2026-1617 · Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama
SQLi in Turkmesh's Turkhotspot 5651 Loglama
joomdonation.com
CVE-2026-62415 · joomdonation.com Membership Pro extension for Joomla
Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2
CVE-2026-15899 · Google Chrome
Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbo…
CVE-2026-15900 · Google Chrome
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox esca…
CVE-2026-15901 · Google Chrome