Browse CVEs

MEDIUM 6.3 CVE-2026-44337 PraisonAI is a multi-agent teams system. From version 2.4.1 to before version 4.6.34, PraisonAI exposes optional SQL/CQL-backed knowledge-store imple… Praisonai 4.6.34+ Fix from $1,6002026-05-08 CRITICAL 9.6 CVE-2026-43944 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerabl… Electerm 3.8.15+ Fix from $2,3002026-05-08 HIGH 7.1 CVE-2026-42261 PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management. From version 0.4.9 to before version 0.5.4, apps/web/src/routes/skills… Prompthub 0.5.4+ Fix from $1,9502026-05-08 CRITICAL 9.0 CVE-2026-33844 Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. Azure Managed Instance For Apache Cassandra Mitigation only Fix from $2,3002026-05-07 HIGH 7.2 CVE-2026-6973 KEVEPSS 34% An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative… Endpoint Manager Mobile 12.6.1.1+ Fix from $1,9502026-05-07 HIGH 8.1 CVE-2026-41654 Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS … Weblate 5.17.1+ Fix from $1,9502026-05-07 HIGH 8.1 CVE-2026-33588 Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the d… Open Notebook 1.8.4+ Fix from $1,9502026-05-07 MEDIUM 6.5 CVE-2026-33589 Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from… Open Notebook 1.8.4+ Fix from $1,6002026-05-07 HIGH 7.8 CVE-2026-28201 An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a… Open Notebook 1.8.3+ Fix from $1,9502026-05-07 CRITICAL 10.0 CVE-2026-33587 Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the dock… Open Notebook 1.8.4+ Fix from $2,3002026-05-07 MEDIUM 6.9 CVE-2026-41890 CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From ve… Mitigation only Fix from $1,6002026-05-07 HIGH 8.2 CVE-2026-41670 Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionCon… Mitigation only Fix from $1,9502026-05-07 MEDIUM 5.4 CVE-2026-8003 Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via … Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 HIGH 7.5 CVE-2026-8007 Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 MEDIUM 6.3 CVE-2026-8010 Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 HIGH 8.8 CVE-2026-7992 Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who convinced a… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-7997 Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS-level pri… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 MEDIUM 5.4 CVE-2026-7998 Insufficient validation of untrusted input in Dialog in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the render… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 HIGH 8.8 CVE-2026-8000 Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute ar… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-7990 Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7967 Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the re… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 MEDIUM 5.4 CVE-2026-7962 Insufficient policy enforcement in DirectSockets in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write vi… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 MEDIUM 6.1 CVE-2026-7953 Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts o… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 MEDIUM 5.4 CVE-2026-7931 Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 HIGH 8.3 CVE-2026-7916 Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer pro… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7905 Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised … Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-40068 In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its co… Claude Code 2.1.84+ Fix from $1,9502026-05-05 MEDIUM 6.5 CVE-2026-32603 Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exi… Sandboxie 1.17.3+ Fix from $1,6002026-05-05 HIGH 8.1 CVE-2026-6180 A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions invo… Papercut Mf 24.1.9 / 25.0.10+ Fix from $1,9502026-05-05 CRITICAL 9.9 CVE-2026-42809 Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been val… Polaris 1.4.1+ Fix from $2,3002026-05-04