Filter and search through 392,252 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-23522 | ### Summary `knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying... | 3.7 | 145 | Neutral | No |
| Yes |
| CVE-2026-23520 | ## Summary Arcane’s updater service supported lifecycle labels `com.getarcaneapp.arcane.lifecycle.pre-update` and `com.getarcaneapp.arcane.lifecycle.... | 9.0 | 714 | Neutral | No | Yes |
| CVE-2026-23519 | ### Summary `thumbv6m-none-eabi` (Cortex M0, M0+ and M1) compiler emits non-constant time assembly when using `cmovnz` (portable version). I did not ... | 9.8 | 588 | Neutral | No | Yes |
| CVE-2026-23518 | ### Summary A vulnerability in Fleet’s Windows MDM enrollment flow could allow an attacker to submit forged authentication tokens that are not proper... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-23517 | ### Summary A broken access control issue in Fleet allowed authenticated users to access debug and profiling endpoints regardless of role. As a resul... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-23516 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execu... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-23512 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is... | 8.6 | 538 | Neutral | No | No |
| CVE-2026-23511 | ### Summary A user enumeration vulnerability has been discovered in Zitadel's login interfaces. An unauthenticated attacker can exploit this flaw to ... | 5.3 | 124 | Neutral | No | Yes |
| CVE-2026-23499 | Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor allowed authenticated staff u... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-23498 | ### Impact We fixed with [CVE-2023-2017](https://github.com/advisories/GHSA-7v2v-9rm4-7m8f) Twig filters to only be executed with allowed functions. H... | 7.2 | 477 | Neutral | No | Yes |
| CVE-2026-23497 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In 2.44.0 and earlier, there is a stored XSS vu... | 5.4 | 116 | Neutral | No | Yes |
| CVE-2026-23496 | ### Summary The application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing "Favourite Output Ch... | 5.4 | 164 | Neutral | No | Yes |
| CVE-2026-23495 | ### Summary The API endpoint for listing Predefined Properties in the Pimcore platform lacks adequate server-side authorization checks. Predefined Pro... | 4.3 | 142 | Neutral | No | Yes |
| CVE-2026-23494 | ### Summary The application fails to enforce proper server-side authorization checks on the API endpoint responsible for reading or listing static rou... | 6.5 | 252 | Neutral | No | Yes |
| CVE-2026-23493 | ### Summary The http_error_log file stores the $_COOKIE and $_SERVER variables, which means sensitive information such as database passwords, cookie s... | 4.9 | 97 | Neutral | No | Yes |
| CVE-2026-23492 | ### Summary An **incomplete SQL injection patch** in the Admin Search Find API allows an authenticated attacker to perform **blind SQL injection**. Al... | 4.9 | 327 | Neutral | Yes | Yes |
| CVE-2026-23490 | ### Summary After reviewing pyasn1 v0.6.1 a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with e... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-23478 | Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JWT callback that allows attacke... | 0.0 | 0 | Neutral | Yes | No |
| CVE-2026-23477 | Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/... | 6.5 | 319 | Neutral | Yes | No |
| CVE-2026-23013 | In the Linux kernel, the following vulnerability has been resolved: net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback octep_vf_request... | 0.0 | 0 | Neutral | No | Yes |