CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-118774 LOW · 3.7 Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used certificate.verify(child), _verifySignature(), lib/x509.js to… Digitalbazaar
- CVE-2026-51912 CRITICAL · 9.8 OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).
- CVE-2026-51903 HIGH · 8.1 SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent…
- CVE-2026-51851 HIGH · 7.5 modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accepts user-controlled file paths without normalization or validation,…
- CVE-2026-118766 MEDIUM · 6.1 Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an OCSP request to the…
- CVE-2026-118768 NONE Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response from a certificate's Authority Information Access URL…
- CVE-2026-62374 NONE SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier, `@sd-jwt/decode`, also used by `@sd-jwt/core`, silently drops…
- CVE-2026-119115 HIGH · 8.5 Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain…
- CVE-2026-118762 CRITICAL · 9.3 Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork…
- CVE-2026-118764 NONE minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so…
- CVE-2026-118760 MEDIUM · 6.5 Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether…
- CVE-2026-107059 HIGH · 7.5 An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing…
- CVE-2026-107056 CRITICAL · 9.1 Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a…
- CVE-2026-107053 CRITICAL · 9.1 Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of…
- CVE-2026-107050 CRITICAL · 9.8 Een probleem in libretro RetroArch v1.22.2 stelt aanvallers in staat om een andere gebruiker te dwingen door aanvallers geleverde code in hun uid te laden,…
- CVE-2026-107048 CRITICAL · 9.8 An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST…
- CVE-2026-107045 CRITICAL · 9.1 Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.
- CVE-2026-107043 CRITICAL · 9.1 Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.
- CVE-2025-12523 MEDIUM · 6.5 Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
- CVE-2026-96203 HIGH · 8.8 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-96199 HIGH · 8.8 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-96198 HIGH · 8.8 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-96196 HIGH · 8.8 Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. Microsoft
- CVE-2026-96187 HIGH · 7.4 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. Microsoft
- CVE-2026-93571 NONE Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML…
- CVE-2026-93570 NONE Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a `DOCTYPE`…
- CVE-2026-88090 MEDIUM · 5.4 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-88078 MEDIUM · 4.3 Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. Microsoft
- CVE-2026-88077 HIGH · 8.8 Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-85899 HIGH · 8.1 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-85897 HIGH · 8.8 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-85890 HIGH · 8.8 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-84294 HIGH · 7.7 Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow…
- CVE-2026-77819 MEDIUM · 6.5 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a… Langflow
- CVE-2026-66912 NONE Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Classic UI. Due to insufficient sanitization of…
- CVE-2026-66911 NONE Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due to lack of sanitization of the Content-Location header,…
- CVE-2026-20942 MEDIUM · 4.3 Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. Microsoft
- CVE-2026-119144 HIGH · 8.8 Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because user-controlled message fields are rendered as templates without neutralization. An…
- CVE-2026-119143 MEDIUM · 4.8 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code to trigger a host panic through out-of-bounds…
- CVE-2026-119139 MEDIUM · 4.8 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker…
- CVE-2026-119140 MEDIUM · 4.8 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious components to panic the host via thread.yield in…
- CVE-2026-119135 MEDIUM · 4.8 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type than it…
- CVE-2026-119131 MEDIUM · 5.3 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http that lets guests crash the host by sending long…
- CVE-2026-119136 MEDIUM · 4.8 Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls. Embedders re-entering WebAssembly via sync…
- CVE-2026-119132 MEDIUM · 4.8 Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused…
- CVE-2026-119127 HIGH · 8.1 ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticated attackers to poison password-reset, invite, and email-verification…
- CVE-2026-119128 HIGH · 7.4 ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users…
- CVE-2026-119124 LOW · 3.3 ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An… Imagemagick
- CVE-2026-119123 LOW · 3.7 ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted… Imagemagick
- CVE-2026-119119 HIGH · 7.5 Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_before_return_html, mean_delay, and max_range fields…