🔔 Premium Features
🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-81829 A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Bala... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-88952 Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker to be signed in as another user by linking an OAuth2 identi... | UNKNOWN | ????? | ????? | NVD | 5 days ago |
| CVE-2026-81453 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path ... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92879 A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulati... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-81443 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attack... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-81442 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker w... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92963 vm2 versions before 3.11.2 fail to properly restrict access to the VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL global variable. Attackers can a... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92962 vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/set... | UNKNOWN | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92961 vm2 before 3.11.6 fails to enforce bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors, allowing attackers to allocate arb... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92960 vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configuration, allowing sandbox code to read host... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92959 vm2 before 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM. While localPromise.prototype.then is replaced with a handler t... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-71568 In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmct... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92958 vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard together with negative entries (e.... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92957 vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard r... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92956 vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compil... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92955 vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the host __proto__ getter/setter through console._... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92954 vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions >= 3.10.0 and <= 3.11.7, Promises returned from the host realm... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92953 vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sandbox mutation. Attackers can use prototype-w... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92952 vm2 versions 3.11.4 through 3.11.6 incompletely filter Node.js registered internal symbols across the sandbox boundary. The extraction filters in lib/... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-92951 vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check that uses non-exact substring matching ins... | CRITICAL | ????? | ????? | NVD | 5 days ago |