🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-83528 MEDIUM Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak ... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-63653 MEDIUM Group-Office is an enterprise customer relationship management and groupware tool. Prior to version 26.0.37, go/modules/community/bookmarks/controller... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-61547 CRITICAL rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqp... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-59986 HIGH rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, the bounds check (*offset = o + len) <= encoded.len overflows... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-124251 HIGH Cross-Site Request Forgery (CSRF) vulnerability in XplodedThemes WPIDE – File Manager & Code Editor wpide allows Cross Site Request Forgery.This... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-107405 MEDIUM An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a deni... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-122247 HIGH R Summary On a self-hosted, single-tenant Budibase instance (`multiTenancy:false`), the public bootstrap endpoint `POST /api/global/users/init` remains ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-111729 HIGH In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ZIP archive ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-122244 HIGH R Summary A low-privileged application end-user (role `BASIC` - not a builder or admin, and on a public data-collection form, an unauthenticated visitor... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-97401 HIGH In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the Kura JVM ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-112186 HIGH In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no limit on its si... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-112185 HIGH In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not restrict access to... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-126050 HIGH apitrace 2.0 through 14.0 contains a heap-based buffer overflow in SnappyFile::flushReadCache() that allows attackers to write past m_compressedCache ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-126049 MEDIUM Gwenhywfar 5.14.2 contains a heap use-after-free vulnerability in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c, which frees a nested record's GWEN... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-126048 MEDIUM Gwenhywfar 4.99.8beta before 5.14.2 contains a stack-based buffer overflow in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c when decoding BER-TLV tags i... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125125 LOW compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From version 0.30.0 until 0.32.0, the ... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-97891 HIGH In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoints (/admi... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125124 LOW compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint does n... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125123 LOW compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint's... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125122 LOW compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint does n... | LOW | ????? | ????? | NVD | 3 days ago |