🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-123804 MEDIUM SuperTokens Core is an open source authentication server. From 7.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123801 HIGH SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, SAML.handleCallback d... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123800 CRITICAL SuperTokens Core is an open source authentication server. From 6.0.0 until 6.0.24, 7.0.23, 8.0.7, 9.0.6, 9.1.6, 9.2.7, 9.3.5, 10.0.8, 10.1.9, 11.0.9, ... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123799 HIGH SuperTokens Core is an open source authentication server. From 11.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, and 12.1.2, Dashboard.isV... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123798 HIGH SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.7, 11.4.7, and 12.0.10, SAML.verifySamlResponseSignature calls OpenSA... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121769 HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpb... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121573 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-120834 HIGH Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-119079 HIGH decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112321 HIGH The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112323 HIGH The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112322 HIGH clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, result... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112320 HIGH The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches fro... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112318 MEDIUM The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_null... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112317 MEDIUM krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption ch... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112316 MEDIUM xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authe... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112315 MEDIUM The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on f... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112319 MEDIUM The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a de... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112314 HIGH clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124834 MEDIUM A security vulnerability has been detected in iomad up to 4.5.15/5.0.11/5.1.8/5.2.4. Affected by this issue is the function store_temporary_password o... | MEDIUM | ????? | ????? | NVD | 4 days ago |