CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 01:52 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2073 | SM School Management System itsourcecode | 9.8 | Feb 7 | itsourcecode School Management System index.php sql injection |
| CVE-2020-37162 | WS Wedding Slideshow Studio Wedding Slideshow Studio | 9.8 | Feb 6 | Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow |
| CVE-2020-37161 | WS Wedding Slideshow Studio Wedding Slideshow Studio | 9.8 | Feb 6 | Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow |
| CVE-2020-37159 | CC Cuckoo Clock Parallaxis | 9.8 | Feb 6 | Cuckoo Clock 5.0 - Buffer Overflow |
| CVE-2020-37095 | CA Cyberoam Authentication Client Cyberoam | 9.8 | Feb 6 | Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH) |
| CVE-2026-25804 | AN antrea antrea-io | 9.1 | Feb 6 | Antrea has invalid enforcement order for network policy rules caused by integer overflow |
| CVE-2026-25803 | 3D 3dp-manager denpiligrim | 9.8 | Feb 6 | 3DP-MANAGER Uses Hard-coded Credentials |
| CVE-2026-25763 | OP openproject opf | 9.9 | Feb 6 | Command Injection on OpenProject repositories leads to Remote Code Execution |
| CVE-2026-1731 RansomwareIn wildKEV | RS Remote Support BeyondTrust | 9.8 | Feb 6 | Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) |
| CVE-2026-1727 | GE Gemini Enterprise (formerly Agentspace) Google Cloud | 9.1 | Feb 6 | Information Disclosure via Bucket Squatting in Google Cloud Agentspace. |
| CVE-2026-25544 | PA payload payloadcms | 9.8 | Feb 6 | Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters |
| CVE-2026-25592 | SE semantic-kernel microsoft | 9.9 | Feb 6 | Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK |
| CVE-2026-25632 | EP EPyT-Flow WaterFutures | 10.0 | Feb 6 | EPyT-Flow has unsafe JSON deserialization (__type__) |
| CVE-2026-25586 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution |
| CVE-2026-25520 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape |
| CVE-2026-25587 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape |
| CVE-2026-25641 | SA SandboxJS nyariv | 9.0 | Feb 6 | SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses |
| CVE-2026-25643 | FR frigate blakeblackshear | 9.1 | Feb 6 | Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape |
| CVE-2026-1709 | RH Red Hat Enterprise Linux 10 Red Hat | 9.8 | Feb 6 | Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication |
| CVE-2026-25752 | FU FUXA frangoteam | 9.1 | Feb 6 | FUXA Unauthenticated Remote Arbitrary Device Tag Write |
| CVE-2026-25753 | AS assessment-placipy Praskla-Technology | 9.8 | Feb 6 | PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover) |
| CVE-2026-25725 | CL claude-code anthropics | 10.0 | Feb 6 | Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json |
| CVE-2026-25722 | CL claude-code anthropics | 9.1 | Feb 6 | Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection |
| CVE-2026-2060 | SB Simple Blood Donor Management System code-projects | 9.8 | Feb 6 | code-projects Simple Blood Donor Management System editcampaignform.php sql injection |
| CVE-2026-2059 | MC Medical Center Portal Management System SourceCodester | 9.8 | Feb 6 | SourceCodester Medical Center Portal Management System emp_edit1.php sql injection |
| CVE-2025-64111 | GO gogs gogs | 9.8 | Feb 6 | Gogs's update .git/config file allows remote command execution |
| CVE-2019-25298 | HT html5_snmp lolypop55 | 9.1 | Feb 6 | html5_snmp 1.11 - 'Router_ID' SQL Injection |
| CVE-2026-2058 | CL CloudClassroom-PHP-Project mathurvishal | 9.8 | Feb 6 | mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection |
| CVE-2026-2057 | MC Medical Center Portal Management System SourceCodester | 9.8 | Feb 6 | SourceCodester Medical Center Portal Management System login.php sql injection |
| CVE-2026-2018 | SM School Management System itsourcecode | 9.8 | Feb 6 | itsourcecode School Management System controller.php sql injection |
| CVE-2026-2017 | W3 W30AP IP-COM | 9.8 | Feb 6 | IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow |
| CVE-2026-2014 | SM Student Management System itsourcecode | 9.8 | Feb 6 | itsourcecode Student Management System index.php sql injection |
| CVE-2026-2013 | SM Student Management System itsourcecode | 9.8 | Feb 6 | itsourcecode Student Management System index.php sql injection |
| CVE-2026-2012 | SM Student Management System itsourcecode | 9.8 | Feb 6 | itsourcecode Student Management System index.php sql injection |
| CVE-2026-2011 | SM Student Management System itsourcecode | 9.8 | Feb 6 | itsourcecode Student Management System controller.php sql injection |
| CVE-2026-21643 In wildKEV | FO FortiClientEMS Fortinet | 9.8 | Feb 6 | Fortinet FortiClient EMS SQL Injection Vulnerability |
| CVE-2026-24300 | AF Azure Front Door Microsoft | 9.8 | Feb 5 | Azure Front Door Elevation of Privilege Vulnerability |
| CVE-2026-24302 | AA Azure ARC Microsoft | 9.8 | Feb 5 | Azure Arc Elevation of Privilege Vulnerability |
| CVE-2026-1963 | WE WeKan | 9.8 | Feb 5 | WeKan Attachment Storage attachments.js MoveStorageBleed access control |
| CVE-2026-1962 | WE WeKan | 9.8 | Feb 5 | WeKan Attachment Migration attachmentMigration.js AttachmentMigrationBleed access control |
| CVE-2026-0106 | AN Android Google | 9.3 | Feb 5 | In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check |
| CVE-2025-68121 | CR crypto/tls Go standard library | 10.0 | Feb 5 | Unexpected session resumption in crypto/tls |
| CVE-2020-37138 | NI Network Inventory Explorer 10-Strike Software | 9.8 | Feb 5 | 10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP) |
| CVE-2020-37137 | PF PHP Fusion PHP Fusion | 9.8 | Feb 5 | PHP-Fusion 9.03.50 - 'panels.php' Eval Injection |
| CVE-2020-37129 | MP Memu Play Microvirt | 9.8 | Feb 5 | Memu Play 7.1.3 - Insecure Folder Permissions |
| CVE-2020-37126 | FD Free Desktop Clock Drive Software Company | 9.8 | Feb 5 | Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH) |
| CVE-2020-37125 | EM EW-7438RPn Mini EDIMAX Technology | 9.8 | Feb 5 | Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution |
| CVE-2020-37124 | B6 B64dec 4Mhz | 9.8 | Feb 5 | B64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter) |
| CVE-2020-37123 | PI Pinger wcchandler | 9.8 | Feb 5 | Pinger 1.0 - Remote Code Execution |
| CVE-2020-37120 | RD Rubo DICOM Viewer Rubo Medical Imaging | 9.8 | Feb 5 | Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH) |