🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-79914 MEDIUM NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Versions 2.1.0 through 2.1.14 contain... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125350 HIGH Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTM... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125349 LOW Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125729 UNKNOWN Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never enforce it.
The ... | UNKNOWN | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125348 HIGH Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside the sandbox... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125347 CRITICAL Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbit... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125346 HIGH Rejected reason: Duplicate CVE. Replaced by CVE-2026-125350 | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125345 MEDIUM Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTM... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125344 HIGH Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125343 HIGH Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute a... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125342 MEDIUM Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML ... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125326 MEDIUM pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated quer... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125320 MEDIUM pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the HTT... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125321 MEDIUM pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, deploym... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125322 MEDIUM pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the whe... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125323 HIGH pgEdge Control Plane is a distributed application for managing and orchestrating Postgres databases across multiple hosts. From 0.1.0 to 0.10.1, gener... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125325 MEDIUM pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the BM25 keyword index i... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-120212 UNKNOWN Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags output.
HTML::Tags and XML::Tags escape a plain string value by ... | UNKNOWN | ????? | ????? | NVD | 3 days ago |
| CVE-2026-63540 MEDIUM Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged sof... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-63028 MEDIUM Improper initialization in the MigTD virtio-vsock stream handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may al... | MEDIUM | ????? | ????? | NVD | 3 days ago |