Most recent entries from cvelistv5

cve-2026-9508

Fri, 29 May 2026 12:09:02 +0000

Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar

Thu, 21 May 2026 00:47:24 +0000

Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction

Fri, 29 May 2026 11:47:02 +0000

Remote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCE

Wed, 27 May 2026 07:55:25 +0000

Unauthenticated SQL Injection in dotCMS Publish Audit API

Tue, 05 May 2026 14:07:53 +0000

Tue, 02 Jun 2026 13:09:06 +0000

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

Fri, 08 May 2026 09:04:24 +0000

Remote Spark SparkView RCE

Thu, 25 Jun 2026 17:29:31 +0000

WordPress OMGF Pro plugin <= 5.2.6 - Arbitrary File Upload vulnerability

Thu, 02 Jul 2026 11:15:26 +0000

WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability

Mon, 06 Jul 2026 20:16:21 +0000

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args