2917244 matches found
CVE-2026-87994
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-fmqh-xp37-5hr8...
CVE-2026-88014
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...
CVE-2026-81052
Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2022-26xx9
CVE-2022-26xx9 CVE-2022-26xx9...
CVE-2026-84819
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
CVE-2026-81791
Subscriber Cross Site Scripting XSS in EventON = 2.5.7 versions...
UBUNTU-CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
CVE-2026-84373 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, homepage, langfuse, vitess...
GHSA-82FW-GWWQ-J7X9 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, homepage, langfuse, vitess...
EUVD-2026-75512
Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...
CVE-2026-88871
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 contains a cross-site request forgery vulnerability in the CustomizeUser plugin's plugin/CustomizeUser/setSubscribers.json.php endpoint. The script reads usersid and ExtraSubscribers from $REQUEST and calls...
CVE-2026-12682
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...
ROOT-OS-ALPINE-318-CVE-2025-29087 CVE-2025-29087 in sqlite - Patched by Root
Root has patched CVE-2025-29087 in the sqlite package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-34180 CVE-2026-34180 in openssl - Patched by Root
Root has patched CVE-2026-34180 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69419 CVE-2025-69419 in openssl - Patched by Root
Root has patched CVE-2025-69419 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69421 CVE-2025-69421 in openssl - Patched by Root
Root has patched CVE-2025-69421 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-28388 CVE-2026-28388 in openssl - Patched by Root
Root has patched CVE-2026-28388 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69420 CVE-2025-69420 in openssl - Patched by Root
Root has patched CVE-2025-69420 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...