CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 14:33 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2014-125136 New | CE Cart Engine C97net | 5.9 | Oct 28 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup |
| CVE-2013-20009 New | WA WAG200G Linksys | 4.8 | Oct 28 | Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter |
| CVE-2013-20008 New | WA WAG200G Linksys | 6.8 | Oct 28 | Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password |
| CVE-2013-20007 New | WA WAG200G Linksys | 7.2 | Oct 28 | Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi |
| CVE-2026-118272 New | A2 a2ui a2ui-project | 4.3 | Oct 28 | a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure |
| CVE-2026-106013 New | JX Jupiter X Core artbees | 9.8 | Oct 28 | Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter |
| CVE-2026-118271 New | A2 a2ui a2ui-project | 4.3 | Oct 28 | a2ui-project a2ui data-context Resolver data-context.ts resource consumption |
| CVE-2026-110879 New | JA jackson-databind FasterXML | 9.8 | Oct 28 | jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512) |
| CVE-2026-110747 New | JA jackson-dataformat-protobuf FasterXML | 7.5 | Oct 28 | jackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payload |
| CVE-2026-104895 New | JA jackson-dataformat-smile FasterXML | 7.5 | Oct 28 | jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of service |
| CVE-2026-106971 New | Product not mapped yet | – | Oct 28 | An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) via a crafted input |
| CVE-2026-106972 New | Product not mapped yet | – | Oct 28 | An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) via a crafted input |
| CVE-2026-104016 New | JA jackson-dataformat-protobuf FasterXML | 7.5 | Oct 27 | jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError |
| CVE-2026-118129 New | CH Chitchatter jeremyckahn | 6.3 | Oct 27 | jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authentication |
| CVE-2026-118338 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118312 New | CH Chrome Google | 9.6 | Oct 27 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118319 New | CH Chrome Google | 4.3 | Oct 27 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page |
| CVE-2026-118309 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-118356 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118315 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118330 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118341 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118347 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118314 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
| CVE-2026-118308 New | CH Chrome Google | 9.6 | Oct 27 | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118335 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
| CVE-2026-118310 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-118342 New | CH Chrome Google | 9.6 | Oct 27 | Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118346 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118316 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118304 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118345 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118313 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118332 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-118334 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118311 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118343 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted… |
| CVE-2026-118359 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118327 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118349 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118353 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118358 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118336 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML… |
| CVE-2026-118333 New | CH Chrome Google | – | Oct 27 | Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page |
| CVE-2026-118328 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML… |
| CVE-2026-118351 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118307 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118355 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-118352 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118337 New | CH Chrome Google | – | Oct 27 | Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page |