by Kastro CVE-2026-88018 · rclone rclone
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,655 matching vulnerabilities · Page 60 of 774
rclone
Dell
CVE-2026-81467 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.
CVE-2026-81048 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Inject…
CVE-2026-81468 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.
CVE-2026-81046 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability.
mitre
CVE-2026-71640 · mitre
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion v…
CVE-2026-52098 · mitre
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
CVE-2026-68006 · mitre
An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file
WWBN
CVE-2026-88869 · WWBN AVideo
AVideo AD_Server Stored XSS via log.php label parameter
CVE-2026-88866 · WWBN AVideo
WWBN AVideo LoginControl Stored XSS via User-Agent Header
CVE-2026-88867 · WWBN AVideo
WWBN AVideo Stored XSS via Category Name and Icon Class
CVE-2026-88868 · WWBN AVideo
AVideo LiveLinks Stored XSS via title and description fields
Apache Software Foundation
CVE-2026-57967 · Apache Software Foundation Apache Artemis
Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
CVE-2026-80351 · Apache Software Foundation Apache Camel K
Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod
CVE-2026-80352 · Apache Software Foundation Apache Camel K
Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects
CVE-2026-67593 · Apache Software Foundation Apache Artemis
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion
CVE-2026-84939 · Apache Software Foundation Apache FreeMarker
Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks
CVE-2026-49364 · Apache Software Foundation Apache Artemis
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers
Cap-go
WebPros
CVE-2026-65638 · WebPros ConfigServer Security & Firewall
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary co…
CVE-2026-65639 · WebPros ConfigServer Security & Firewall
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured a…
CVE-2026-68487 · WebPros Plesk
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
CVE-2026-68488 · WebPros Plesk
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to r…
addonsorg
CVE-2026-18351 · addonsorg Drag and Drop File Upload for Elementor Forms
Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter
krakenjs
CVE-2026-89043 · krakenjs passport-saml-encrypted
passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending
CVE-2026-89042 · krakenjs passport-saml-encrypted
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
knowns-dev
AWS
traefik
CVE-2026-88877 · traefik traefik
Traefik v3.7.0 Authentication Bypass via from-to-www-redirect
CVE-2026-88007 · traefik traefik
Traefik HTTP/3 Backend NTLM Connection Reuse
CVE-2026-88008 · traefik traefik
Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
Rapid7
Armiya Information Technologies Ltd. Co.
CVE-2026-7188 · Armiya Information Technologies Ltd. Co. Access Control System
SQLi in Armiya Information Technologies' Access Control System
CVE-2026-8323 · Armiya Information Technologies Ltd. Co. Access Control System
Open Redirect in Armiya Information Technologies' Access Control System
GeoVision Inc.
CVE-2026-88278 · GeoVision Inc. GV-LPCLPC2011/2211
GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay
CVE-2026-88285 · GeoVision Inc. GV-LPC2011/LPC2211
GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service
GIS Informatics
CVE-2026-9163 · GIS Informatics GisLab Laboratory Management System
SQLi in GIS Informatics' GisLab Laboratory Management System
Unknown
CVE-2026-77770 · Unknown miniOrange 2FA
miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator
CVE-2026-78361 · Unknown zipMoney(Zip Co) Payments Plugin for WooCommerce
zipMoney(Zip Co) Payments Plugin for WooCommerce < 2.4.0 - Unauthenticated Arbitrary Option Deletion
joomshaper.com
CVE-2026-78082 · joomshaper.com SP Property extension for Joomla
Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4
Amazon
CVE-2026-85228 · Amazon Deep Java Library
Integer overflow in tensor buffer validation in Deep Java Library
renovatebot
CVE-2026-88880 · renovatebot renovate
Renovate before 44.11.3 Credential Exfiltration via Link Header
CVE-2026-88881 · renovatebot renovate
Renovate before 44.11.3 Credential Exfiltration via Link Header
CVE-2026-88882 · renovatebot renovate
Renovate before 44.11.2 Credential Exfiltration via Link Header
CVE-2026-88887 · renovatebot renovate
Renovate before 44.11.2 Credential Exfiltration via Link Header
Par avisverifies
CVE-2026-81800 · Par avisverifies Verified Reviews (Avis Vérifiés)
WordPress Verified Reviews (Avis Vérifiés) plugin <= 2.4.6 - SQL Injection vulnerability
SUSE
CVE-2026-44950 · SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8
fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2
CVE-2026-59679 · SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8