by Kastro CVE-2026-22679 · Weaver Network Co., Ltd. E-cology
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,960 matching vulnerabilities · Page 191 of 780
Weaver Network Co., Ltd.
Windmill Labs
CVE-2026-23696 · Windmill Labs Windmill CE (Community Edition)
Windmill < 1.603.3 File Ownership Handling SQLi RCE
mitre
CVE-2024-36057 · mitre
Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution.
CVE-2026-31271 · mitre
megagao production_ssm v1.0 contains an authorization bypass vulnerability in the user addition functionality.
CVE-2026-31272 · mitre
MRCMS 3.1.2 contains an access control vulnerability.
CVE-2024-36058 · mitre
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the…
CVE-2025-69515 · mitre
An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsi…
CVE-2026-30079 · mitre
In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure.
CVE-2025-52908 · mitre
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1…
CVE-2025-52909 · mitre
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1…
CVE-2025-62818 · mitre
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13…
CVE-2025-71058 · mitre
Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitima…
ChurchCRM
CVE-2026-39339 · ChurchCRM CRM
ChurchCRM has an API Authentication Bypass
CVE-2026-39337 · ChurchCRM CRM
ChurchCRM Affected by Unauthenticated RCE in Install Wizard
CVE-2026-35573 · ChurchCRM CRM
ChurchCRM has a Path traversal leads to RCE
CVE-2026-39342 · ChurchCRM CRM
ChurchCRM has a SQL injection searchwhat parameter via QueryView.php
patrickhener
CVE-2026-35392 · patrickhener goshs
goshs has an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT Upload
CVE-2026-35393 · patrickhener goshs
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload
CVE-2026-35471 · patrickhener goshs
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs
dgtlmoon
CVE-2026-35490 · dgtlmoon changedetection.io
changedetection.io has an Authentication Bypass via Decorator Ordering
Red Hat
CVE-2026-4631 · Red Hat Red Hat Enterprise Linux 10
Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
SaturdayDrive
CVE-2026-0740 · SaturdayDrive Ninja Forms - File Uploads
Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload
Beijing Topsec Network Security Technology Co., Ltd.
CVE-2021-4473 · Beijing Topsec Network Security Technology Co., Ltd. Tianxin Internet Behavior Management System
Tianxin Internet Behavior Management System Command Injection via toQuery.php
gotenberg
parisneo
CVE-2026-1114 · parisneo parisneo/lollms
Improper Access Control via Weak JWT Token in parisneo/lollms
MervinPraison
CVE-2026-35615 · MervinPraison PraisonAI
PraisonAI has a Path Traversal in FileTools
CVE-2026-39305 · MervinPraison PraisonAI
Arbitrary File Write / Path Traversal in Action Orchestrator
Hewlett Packard Enterprise (HPE)
CVE-2026-23818 · Hewlett Packard Enterprise (HPE) Private 5G Core
Open Redirect Vulnerability in HPE Aruba Networking Private 5G Core On-Prem
LibRaw
CVE-2026-21413 · LibRaw LibRaw
A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.
CVE-2026-20889 · LibRaw LibRaw
A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b.
CVE-2026-20911 · LibRaw LibRaw
A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b.
CVE-2026-20884 · LibRaw LibRaw
An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2.
CVE-2026-24450 · LibRaw LibRaw
An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2.
mattieb
pyload
github.com/jackc/pgx/v5
CVE-2026-33815 · github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3
CVE-2026-33815 in github.com/jackc/pgx
CVE-2026-33816 · github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3
CVE-2026-33816 in github.com/jackc/pgx
Erlang
Hitachi
CVE-2025-65115 · Hitachi JP1/IT Desktop Management 2 - Manager
Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM
mintplex-labs
CVE-2026-5627 · mintplex-labs mintplex-labs/anything-llm
Path Traversal in mintplex-labs/anything-llm
forceworkbench
CVE-2026-35178 · forceworkbench forceworkbench
Workbench Affected by Remote Code Execution (RCE) via Malicious Cookie in Timezone Conversion
NationalSecurityAgency
CVE-2026-35580 · NationalSecurityAgency emissary
Emissary has GitHub Actions Shell Injection via Workflow Inputs
Mozilla
CVE-2026-5731 · Mozilla Firefox
Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
CVE-2026-5734 · Mozilla Firefox
Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
CVE-2026-5735 · Mozilla Firefox