by Kastro CVE-2026-45018 · Chainlit chainlit
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,777 matching vulnerabilities · Page 80 of 776
Chainlit
nltk
mitre
vrana
QWED-AI
Adobe
CVE-2026-76195 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
CVE-2026-76197 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
CVE-2026-76193 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
Alluxio
MervinPraison
lin-snow
OpenSSL
Weidmueller Interface
CVE-2026-63586 · Weidmueller Interface IE-SR-2TX-WL
Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface
Apache Software Foundation
CVE-2026-49845 · Apache Software Foundation Apache Hive
Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths
CVE-2026-55976 · Apache Software Foundation Apache Hive
Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url
getgrav
CVE-2026-72699 · getgrav grav-plugin-login
Grav Login Plugin before 3.9.1 Email Enumeration via Registration
CVE-2026-72702 · getgrav grav
Grav CMS before 2.0.16 Origin Validation Bypass via Referer
CVE-2026-56710 · getgrav grav
Grav Login Plugin before 1.0.16 Privilege Escalation via Unlock
TYPO3
CVE-2026-77136 · TYPO3 Extension "powermail"
Server-Side Template Injection in extension "powermail" (powermail)
CVE-2026-77138 · TYPO3 Extension "HTML5 Video Player vs. Powermail"
Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
zephyrproject
CVE-2026-13214 · zephyrproject zephyr
Stack buffer overflow in OCPP GetConfiguration key parsing
miniorange.com
CVE-2026-77998 · miniorange.com SAML SSO Free for Joomla extension for Joomla
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4
gitpython-developers
CVE-2026-78676 · gitpython-developers GitPython
GitPython before 3.1.59 Remote Code Execution via Config Injection
TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company
CVE-2026-16286 · TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management
File Upload in TRTEK Software's Software Repository Management
wintercms
cbcoutinho
Cozmoslabs
CVE-2026-78267 · Cozmoslabs TranslatePress
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
CVE-2026-78989 · Google Chrome
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitr…
CVE-2026-78935 · Google Chrome
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execut…
CVE-2026-78939 · Google Chrome
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process t…
CVE-2026-79012 · Google Chrome
Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering…
CVE-2026-79019 · Google Chrome
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbit…
CVE-2026-79052 · Google Chrome
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox vi…
CVE-2026-79111 · Google Chrome
Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-79150 · Google Chrome
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the…
CVE-2026-79200 · Google Chrome
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox vi…
CVE-2026-79282 · Google Chrome
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside…
CVE-2026-79290 · Google Chrome
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox vi…
CVE-2026-79047 · Google Chrome
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitr…
CVE-2026-79130 · Google Chrome
Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox…
CVE-2026-79257 · Google Chrome
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox v…
Amazon
FURUNO ELECTRIC CO., LTD.
CVE-2026-59769 · FURUNO ELECTRIC CO., LTD. FA-50
FA-50 all versions contain hard-coded credentials.
WatchGuard
CVE-2026-57909 · WatchGuard WatchGuard Agent
WatchGuard Agent path traversal allows unauthenticated remote code execution
CVE-2026-57910 · WatchGuard WatchGuard Agent