🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-125358 HIGH Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation vulnerability in the HostLink c... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125357 MEDIUM Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request th... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-117477 MEDIUM KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125117 HIGH Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mongoose can... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125120 CRITICAL Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose coun... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125119 HIGH Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. From 6.0.0 until 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mong... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125118 MEDIUM Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Schema.proto... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125116 MEDIUM Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mongoose use... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125113 MEDIUM The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple sto... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125115 MEDIUM Novu provides an API for sending notifications through multiple channels. Prior to 3.17.0, validateUrlSsrf in libs/application-generic/src/utils/ssrf-... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125075 MEDIUM A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This impacts the function getMessage of the file cr... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-115934 CRITICAL An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search, allowing stacked query execution... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125074 MEDIUM A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown function of the file reset_password.... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124035 HIGH Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 w... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124034 MEDIUM Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-90591 HIGH The NXP ENET-QOS Ethernet driver's receive work handler eth_nxp_enet_qos_rx() in drivers/ethernet/eth_nxp_enet_qos hands each processed descripto... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-90590 MEDIUM The NXP ENET QoS Ethernet driver in drivers/ethernet/eth_nxp_enet_qos serialises transmission with a binary semaphore, data->tx.tx_sem, taken in et... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-90589 MEDIUM When CONFIG_THREAD_STACK_MEM_MAPPED is enabled, each thread stack is mapped into the kernel virtual address space with a guard page on either side, an... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-90588 LOW The HTTP client's debug helper print_header_field() in subsys/net/lib/http/http_client.c formatted an http_parser data-callback slice with a %s c... | LOW | ????? | ????? | NVD | 4 days ago |
| CVE-2026-90585 MEDIUM The Renesas RA SCI UART driver's receive-error ISR, uart_ra_sci_eri_isr() in drivers/serial/uart_renesas_ra_sci.c, acknowledged the error conditi... | MEDIUM | ????? | ????? | NVD | 4 days ago |