Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 408,811
- Last 24h
- 2,095
- Critical, 7 days
- 348
- Known exploited
- 1,779
107,767 results · Clear filters · Feed
-
Medium 6.9
Null pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial…
-
Medium 5.4
Protection mechanism failure for some BigDL before version 2.4.0 within Ring 3: User Applications may allow an escalati…
-
Medium 6.5
pgEdge Postgres MCP Server SQL injection in the count_rows where parameter
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the count_rows tool accepted subqueries against tables other than the table named in the tool…
-
Medium 6.5
pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, deployments exposing the nondefault HTTP transport with authentication enabled used the leftmost caller-supplied X-F…
-
Medium 6.7
Improper Handling of Highly Compressed Data (CWE-409) in the ZIP loader of whatstk from 0.7.0 before 0.9.0 allows a par…
-
Medium 5.3
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible c…
-
Medium 4.7
Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside …
-
Medium 4.7
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outsid…
-
Medium 5.1
Gwenhywfar 5.14.2 contains a heap use-after-free vulnerability in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c, which fr…
-
Medium 5.1
Gwenhywfar 4.99.8beta before 5.14.2 contains a stack-based buffer overflow in GWEN_TLV_Buffer_To_DB() in src/parser/tlv…
-
Medium 5.3
compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output
compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint escapes GitHub Actions workflow-command openers only after ASCII spaces and tabs, while the runner strips all leadi…
-
Medium 5.0
Group-Office is an enterprise customer relationship management and groupware tool. Prior to version 26.0.37, go/modules…
-
Medium 5.3
Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction
When tarfile or zipfile command line interface (CLI) is used to decompress an archive, a Python script shadowing the stdlib can be created. Then if an error occurs during decompressing the next file, the newly created Python script is executed. This is especi…
-
Medium 5.4
Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User Applicatio…
-
Medium 5.4
Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalati…
-
Medium 4.8
Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User A…
-
Medium 4.8
Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User A…
-
Medium 5.4
Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may…
-
Medium 5.8
Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before versi…
-
Medium 4.8
Uncaught exception for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…
-
Medium 4.8
Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User A…
-
Medium 5.9
`verify_x509_cert` does not check the certificate validity period
Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may e…
-
Medium 4.8
Improper input validation for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applicati…
-
Medium 6.8
Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may a…
-
Medium 5.4
Protection mechanism failure for some Intel Neural Compressor software before version master within Ring 3: User Applic…
-
Medium 6.0
Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0…
-
Medium 5.7
Panic on a GCP launch endorsement without TDX measurements
Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial o…
-
Medium 6.9
Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a…
-
Medium 5.8
Integer underflow (wrap or wraparound) for the Intel(R) NPU Driver software before version 1.33.0 within Ring 3: User A…
-
Medium 5.4
Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applicat…
-
Medium 5.6
Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User Applicati…
-
Medium 5.9
Out-of-bounds write for some Intel(R) Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow a denial…
-
Medium 6.9
Out-of-bounds read for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers m…
-
Medium 5.4
Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an es…
-
Medium 4.8
Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R) P…
-
Medium 6.9
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers …
-
Medium 6.8
Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a denial of se…
-
Medium 6.8
Improper input validation for some Intel(R) CIP software within Ring 2: Privileged Process may allow a denial of servic…
-
Medium 6.8
Null pointer dereference for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may al…
-
Medium 6.8
Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Dr…