by Kastro CVE-2026-58126 · Hyland PACSgear PACS Scan
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,897 matching vulnerabilities · Page 141 of 778
Hyland
CVE-2026-58127 · Hyland PACSgear MediaWriter
PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service
Control Web Panel
CVE-2026-57517 · Control Web Panel Control Web Panel
Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter
mitre
CVE-2026-52186 · mitre
SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/…
CVE-2026-51947 · mitre
An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_2…
StoneFly
CVE-2026-56413 · StoneFly Storage Concentrator
OS Command Injection in StoneFly Storage Concentrator
CVE-2026-56415 · Stonefly Storage Concentrator
OS Command Injection in StoneFly Storage Concentrator
CVE-2026-50110 · StoneFly Storage Concentrator
Use of Hard-coded Credentials in StoneFly Storage Concentrator
uvnc
cozyvision1
CVE-2026-11387 · cozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
NVIDIA
CVE-2026-24270 · NVIDIA AIStore framework
NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication.
CVE-2025-23350 · NVIDIA BlueField GA
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may c…
CVE-2025-23351 · NVIDIA BlueField GA
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may c…
BPS
cmsjunkie
CVE-2026-6070 · cmsjunkie WP-BusinessDirectory – Business directory plugin for WordPress
WP-BusinessDirectory <= 4.0.1 - Unauthenticated Arbitrary File Deletion via Path Traversal via '_filename' Parameter
LCweb
CVE-2026-14121 · Google Chrome
Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via mal…
CVE-2026-13883 · Google Chrome
Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a c…
CVE-2026-13901 · Google Chrome
Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rende…
CVE-2026-14104 · Google Chrome
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute…
CVE-2026-14090 · Google Chrome
Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker…
CVE-2026-13880 · Google Chrome
Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process t…
CVE-2026-13909 · Google Chrome
Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the ren…
CVE-2026-13920 · Google Chrome
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had…
CVE-2026-13934 · Google Chrome
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had c…
CVE-2026-14017 · Google Chrome
Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rend…
CVE-2026-14037 · Google Chrome
Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer…
CVE-2026-14043 · Google Chrome
Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process…
CVE-2026-14055 · Google Chrome
Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker w…
CVE-2026-14056 · Google Chrome
Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised…
CVE-2026-14093 · Google Chrome
Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to pote…
CVE-2026-14095 · Google Chrome
Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rend…
CVE-2026-14097 · Google Chrome
Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromis…
CVE-2026-14101 · Google Chrome
Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised t…
CVE-2026-14106 · Google Chrome
Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had c…
CVE-2026-14109 · Google Chrome
Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rendere…
CVE-2026-14113 · Google Chrome
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer p…
CVE-2026-14038 · Google Chrome
Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp…
CVE-2026-14044 · Google Chrome
Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to pot…
CVE-2026-14120 · Google Chrome
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the render…
CVE-2026-13882 · Google Chrome
Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially per…
CVE-2026-14105 · Google Chrome
Insufficient policy enforcement in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy…
CVE-2026-14152 · Google Chrome
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer…
@fastify/middie
CVE-2026-14198 · @fastify/middie @fastify/middie