Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,342
- Last 24h
- 680
- Critical, 7 days
- 356
- Known exploited
- 1,779
107,949 results · Clear filters · Feed
-
Medium 4.3
Tanium addressed an information disclosure vulnerability in Tanium Server.
Tanium addressed an information disclosure vulnerability in Tanium Server.
-
Medium 6.6
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
-
Medium 4.3
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
-
Medium 4.3
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
-
Medium 6.3
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
-
Medium 6.0
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
-
Medium 5.5
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
-
Medium 6.5
Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
-
Medium 6.6
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
-
Medium 4.3
Tanium addressed an improper access controls vulnerability in Enforce.
Tanium addressed an improper access controls vulnerability in Enforce.
-
Medium 6.5
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
-
Medium 5.3
Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
-
Medium 5.4
Neko: Authorization bypass in legacy WebRTC input handling
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost() e…
-
Medium 5.3
Tanium addressed a denial of service vulnerability in Tanium Server.
Tanium addressed a denial of service vulnerability in Tanium Server.
-
Medium 6.5
Tanium addressed a SQL injection vulnerability in Provision.
Tanium addressed a SQL injection vulnerability in Provision.
-
Medium 6.5
Tanium addressed a SQL injection vulnerability in Patch.
Tanium addressed a SQL injection vulnerability in Patch.
-
Medium 4.2
Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
-
Medium 5.8
Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to get_page_with_referer() with…
-
Medium 5.3
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 until 1.3.2, the GET /api/v1/controller/ca/<integer-id>/crl endpoint allows an authenticated organization manager with CA …
-
Medium 6.5
CVE-2026-16491 CVE Record
Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings. A user with dashboard permission-management rights on any folder could therefore be treated as an administrator of ever…
-
Medium 5.9
Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an out-of-bounds write in `chan_unistim` `DIALPAGE` digit handling can overflow the `…
-
Medium 6.5
systeminformation: Prototype pollution in `networkStats()` via the interface name
systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interface data in the plain-object _network cache and indexes it with the sanitized calle…
-
Medium 6.5
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP…
-
Medium 6.5
libXtst RECORD EnableContext Reply Endless Loop
A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.
-
Medium 5.5
Substance3D - Painter | Out-of-bounds Read (CWE-125)
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction i…
-
Medium 4.3
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the install…
-
Medium 5.9
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a back…
-
Medium 5.9
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a back…
-
Medium 6.9
A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token a…
-
Medium 5.3
App passwords were allowed to bypass password confirmation on sensitive endpoints.
-
Medium 4.3
A user could create a docx or odt file with a # in the filename with confidential information such as a credit card num…
-
Medium 4.6
The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for …
-
Medium 4.3
When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("Y…
-
Medium 4.6
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authenti…
-
Medium 6.5
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoder(io.T…
-
Medium 4.0
Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
### Summary Formatting a client session value with Debug exposes its TLS 1.2 master secret or TLS 1.3 resumption PSK. A custom session store that logs these values can disclose keys to readers of the logs. Ordinary connection and built-in cache diagnostics re…
-
Medium 5.7
Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket
Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic to obtain the user’s VPN username and password.
-
Medium 6.1
Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a …
-
Medium 6.0
Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster…
-
Medium 5.6
Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted requ…