Skip to content
Search CVEs
Today
-
blitzstrike npm
Malware in blitzstrike
GHSA-g8hc-9fqj-qjj6
No score
-
apache software foundation hertzbeat
Apache HertzBeat: incomplete XPath expression validation in aliasFields
CVE-2026-114442
No score
-
dsh-moss-wallpaper npm
Malware in dsh-moss-wallpaper
GHSA-rgvh-3r77-gg9c
No score
-
typo3 extension "mail"
Information Disclosure in extension "Mail" (mail)
CVE-2026-120328
6.9 Medium
-
typo3 extension "mail"
Open Redirection in extension "Mail" (mail)
CVE-2026-120327
5.3 Medium
-
typo3 extension "mail"
Broken Access Control in extension "Mail" (mail)
CVE-2026-120329
5.3 Medium
-
typo3 extension "mail"
Server-Side Request Forgery in extension "Mail" (mail)
CVE-2026-120331
5.3 Medium
-
typo3 extension "mail"
Broken Access Control in extension "Mail" (mail)
CVE-2026-120330
7.1 High
-
typo3 extension "mail"
Cross-Site Scripting in extension "Mail" (mail)
CVE-2026-120332
5.1 Medium
-
typo3 extension "frontend user registration"
Broken Access Control in extension "Frontend User Registration" (sf_register)
CVE-2026-120333
8.8 High
-
zohocorp manageengine key manager plus
Command injection vulnerability
CVE-2026-77691
8.1 High
-
vivo bluelm copilot
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows a malicious application installed on the sa…
CVE-2026-89229
5.1 Medium
-
zohocorp manageengine key manager plus
Improper access control vulnerability
CVE-2026-77778
7.1 High
-
apache software foundation oozie
Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership
CVE-2026-119641
No score
-
apache jclouds
Apache JClouds: XML External Entity (XXE) in provider-response parsing
CVE-2026-119724
No score
-
eclipse foundation mnestix
Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering
CVE-2026-89293
8.8 High
-
zohocorp manageengine key manager plus
Improper access control vulnerability
CVE-2026-77777
7.1 High
-
service-roles-registry npm
Malicious code in service-roles-registry (npm)
GHSA-qvhq-m873-hq8g
No score
-
eclipse foundation mnestix
Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures
CVE-2026-89292
9.2 Critical
-
vibes-plug npm
Malware in vibes-plug
GHSA-xfv7-hqg2-67x3
No score
-
bitdefender pybddisasm
Uninitialized output buffer returned after nd_to_text failure in pybddisasm
CVE-2026-118448
6.9 Medium
-
bitdefender pybddisasm
Uninitialized INSTRUX contents returned after decoding failure in pybddisasm
CVE-2026-118447
4.8 Medium
-
bitdefender pybddisasm
Use-after-free in INSTRUX array members in pybddisasm
CVE-2026-118446
6.9 Medium
-
bitdefender pybddisasm
Use-after-free in INSTRUX structure members in pybddisasm
CVE-2026-118445
6.9 Medium
-
bitdefender pybddisasm
Out-of-bounds reads during instruction decoding in pybddisasm
CVE-2026-118444
4.8 Medium
-
welotec tk100, tk500-v2, tk500-v3 +2 more
Buffer Overflow in Digital I/O
CVE-2026-109161
6.9 Medium
-
welotec tk100, tk500-v2, tk500-v3 +2 more
Command Injection in IPsec VPN
CVE-2026-105982
8.6 High
-
welotec tk100, tk500-v2, tk500-v3 +2 more
Command Injection in Digital I/O
CVE-2026-105981
8.6 High
-
welotec tk100, tk500-v2, tk500-v3 +2 more
Command Injection in WireGuard VPN
CVE-2026-105980
8.6 High
-
welotec tk100, tk500-v2, tk500-v3 +2 more
Command Injection in ZeroTier VPN
CVE-2026-105979
8.6 High
- Show older vulnerabilitiesLoading…