🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-90586 HIGH The Xtensa MMU userspace port never initialized the per-thread page-table pointer thread->arch.ptables during thread setup, while arch_mem_domain_t... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-90587 MEDIUM usbh_device_init() in subsys/usb/host/usbh_device.c rejects a device whose device descriptor advertises bNumConfigurations == 0, but it only logs the ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-77473 MEDIUM AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framew... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-73857 HIGH ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.15 until 3.0.17, XML request b... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-63496 HIGH augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep() function exported by @augment-vir/node inserts caller-controlled... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125111 HIGH Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Multipart::Parser can retain parsed data in its internal String... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125110 MEDIUM Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Static serves a path after Utils.clean_path_info normalization ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125109 MEDIUM Rack is a modular Ruby web server interface. From 3.0 until 3.1.23 and 3.2.8, Rack::Request#host_with_port, #base_url, and #url can return an attacker... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125108 LOW Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Multipart::Parser.parse_boundary can skip a leading empty or qu... | LOW | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125107 HIGH Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterFo... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125105 LOW Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, Wagtail applies ETag conditional reques... | LOW | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125106 MEDIUM Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, a Wagtail CMS user with the submit tran... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123820 MEDIUM Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, the Wagtail Documents and Images API V2... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123818 HIGH LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0, _is_safe_url validates remote media URL... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123819 MEDIUM Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, a CMS user who has add permission for a... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123816 HIGH pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, Api.check_apikey caches successful validation in self._a... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123812 LOW Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration in src/index.ts performs... | LOW | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123810 MEDIUM Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.1.1, several read capabilities interpolate caller-controlled values into... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123811 HIGH Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123814 MEDIUM pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, an authenticated non-admin user with the SETTINGS permis... | MEDIUM | ????? | ????? | NVD | 4 days ago |