CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- No product listedA SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker...6.5 Medium
- No product listedA vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to...9.8 Critical
- No product listedA vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an...9.8 Critical
litellmPyPILiteLLM vulnerable to server-side template injection in the /prompts/test endpoint9.8 Critical- No product listedAgno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection....9.8 Critical
- No product listedAn issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote...7.2 High
- No product listedA Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...9.8 Critical
- No product listedA Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...9.8 Critical
- No product listedAn issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and...9.8 Critical
- No product listedAn issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers...7.5 High
- No product listedA NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause...7.5 High
- No product listedAn issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of...7.5 High
- No product listedAn issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial...7.5 High
- No product listedA NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows...7.5 High
- No product listedImproper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc...7.5 High
- No product listedAn issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4...7.5 High
- No product listedImproper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1...7.5 High
- No product listedAn issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of...7.5 High
- No product listedAn issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS...7.5 High
- No product listedAn issue in free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) when parsing...7.5 High
- No product listedAn issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of...7.5 High
- No product listedImproper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows...7.5 High
- No product listedAn issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a...7.5 High
- No product listedA NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows...7.5 High
- No product listedAn issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0...7.5 High
- No product listedAn issue in the ModifyAMFEventSubscriptionProcedure function (processor/event_exposure.go) of...7.5 High
- No product listedA reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS...7.5 High
- No product listedA reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers...7.5 High
- No product listedAn integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows...7.5 High
- No product listedAn issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). The...8.8 High
- No product listedAn issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a...9.8 Critical
- No product listedccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing...7.5 High
- No product listedccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability...7.5 High
- No product listedA null pointer dereference vulnerability exists in the server-side session management logic of...7.5 High
- No product listedccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability...7.5 High
- No product listedccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing...7.5 High
- the gnu c library glibcBuffer overflow in strfmon and strfmon_l right-justification padding7.7 High
- pivotal reactor nettyReactor Netty HTTP Server Denial of Service With Pipelined Requests5.3 Medium
- spring integration, vmware spring integration +1 moreUDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=false6.3 Medium
- ddfourtwo sentry-selfhosted-mcpddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgery6.9 Medium
- broadcom reactor coreReactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream delivers items during an active flush5.9 Medium
- spring integration, vmware spring integration +1 moreZipTransformer uses file_name header to build workDirectory path without sanitization5.4 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreUnbounded decompression of attacker-supplied compressed message bodies6.5 Medium
- spring integration, vmware spring integration +1 moreUnbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS5.4 Medium
- broadcom reactor coreReactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around5.9 Medium
- spring integration, vmware spring integration +1 moreJsonToObjectTransformer resolves the json__TypeId__ message header to an arbitrary class without an allow-list6.3 Medium
- spring ai, vmware spring ai +1 morePredictable cache directory location allows local ONNX model substitution in Spring AI7.5 High
- spring ai, vmware spring ai +1 moreUnbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader7.5 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST allows mutation of the version property of immutable aggregates via PUT4.3 Medium
- broadcom reactor nettyReactor Netty HTTP Server may incorrectly evaluate proxy addresses5.3 Medium
- Show moreLoading…