Browse CVEs

CRITICAL 9.8 CVE-2026-50774 An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role. No fix yet Fix from $5,7502026-08-17 HIGH 7.8 CVE-2026-50773 An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file. No fix yet Fix from $4,9002026-08-17 HIGH 7.5 CVE-2026-45698 Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow… No fix yet Fix from $4,9002026-08-17 MEDIUM 6.9 CVE-2026-17639 Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to c… No fix yet Fix from $4,0002026-08-17 HIGH 8.9 CVE-2026-12553 HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files… No fix yet Fix from $4,9002026-08-17 CRITICAL 9.3 CVE-2026-74254 Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection iss… No fix yet Fix from $5,7502026-08-17 CRITICAL 10.0 CVE-2026-74253 Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 14.0.0 - Regular Labs Sourcerer befor… No fix yet Fix from $5,7502026-08-17 HIGH 7.5 CVE-2026-73523 COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to caus… No fix yet Fix from $4,9002026-08-17 HIGH 7.5 CVE-2026-73522 COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a … No fix yet Fix from $4,9002026-08-17 MEDIUM 6.5 CVE-2026-73424 Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverle… Patch available Fix from $4,0002026-08-17 HIGH 7.5 CVE-2026-71980 Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the decodeSIDframe() function in src/cng.c that allows… No fix yet Fix from $4,9002026-08-17 HIGH 7.5 CVE-2026-71979 INDI (Instrument Neutral Distributed Interface) indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability t… Patch available Fix from $4,9002026-08-17 HIGH 8.7 CVE-2026-71491 sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-o… Patch available Fix from $4,9002026-08-17 MEDIUM 5.3 CVE-2026-68520 Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, as_dict_secure() in glances/config.py checks only option names and e… Patch available Fix from $4,0002026-08-17 HIGH 7.1 CVE-2026-68519 Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run() in glances/actions.py ignores --disable-config-… Patch available Fix from $4,9002026-08-17 HIGH 8.8 CVE-2026-62982 Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, _sanitize_mustache_dict() in glances/actions.py skips nested… Patch available Fix from $4,9002026-08-17 MEDIUM 6.5 CVE-2026-59903 Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsH… Patch available Fix from $4,0002026-08-17 HIGH 7.5 CVE-2026-59902 Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessag… Patch available Fix from $4,9002026-08-17 MEDIUM 6.2 CVE-2026-59894 sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes before quo… No fix yet Fix from $4,0002026-08-17 HIGH 7.5 CVE-2026-59893 sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/le… Patch available Fix from $4,9002026-08-17 HIGH 8.7 CVE-2026-54284 sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly… Patch available Fix from $4,9002026-08-17 CRITICAL 9.8 CVE-2026-50772 An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function. No fix yet Fix from $5,7502026-08-17 CRITICAL 9.1 CVE-2026-51346 SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensit… No fix yet Fix from $5,7502026-08-17 MEDIUM 6.1 CVE-2026-50771 Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification… No fix yet Fix from $4,0002026-08-17 CRITICAL 9.8 CVE-2026-50770 An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request. No fix yet Fix from $5,7502026-08-17 CRITICAL 9.8 CVE-2026-50769 The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conf… No fix yet Fix from $5,7502026-08-17 CRITICAL 9.8 CVE-2026-50768 File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the … No fix yet Fix from $5,7502026-08-17 MEDIUM 5.8 CVE-2026-48053 Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and … No fix yet Fix from $4,0002026-08-17 HIGH 8.4 CVE-2026-46345 compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the `-o/--output` argument in `trestle … Patch available Fix from $4,9002026-08-17 HIGH 8.1 CVE-2026-33437 Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/… No fix yet Fix from $4,9002026-08-17