cve.li

Recent

CVE-2026-3027CWE-79CWE-94

erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting

Published 2026-02-23 by VulDB

CVE-2026-25648CWE-79CWE-434

Traccar Vulnerable to Stored Cross-Site Scripting (XSS) via Malicious SVG File Upload

Published 2026-02-23 by GitHub_M

CVE-2026-23521CWE-22CWE-73

Traccar vulnerable to Path Traversal and External Control of File Name or Path

Published 2026-02-23 by GitHub_M

CVE-2026-3075CWE-497

WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability

Published 2026-02-23 by Patchstack

CVE-2025-68930CWE-1385

Traccar Missing Origin Validation in WebSockets

Published 2026-02-23 by GitHub_M

CVE-2026-23693CWE-306

ElementsKit Lite < 3.7.9 Unauthenticated Mailchimp REST Endpoint

Published 2026-02-23 by VulnCheck

CVE-2026-23694CWE-352

Aruba HiSpeed Cache < 3.0.5 CSRF in Multiple Administrative AJAX Actions

Published 2026-02-23 by VulnCheck

CVE-2026-3026CWE-918

erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery

Published 2026-02-23 by VulDB

CVE-2026-3025CWE-434CWE-284

ShuoRen Smart Heating Integrated Management Platform ExampleNodeService.asmx unrestricted upload

Published 2026-02-23 by VulDB

CVE-2026-27623CWE-20

Valkey has Pre-Authentication DOS from malformed RESP request

Published 2026-02-23 by GitHub_M

Load more ↓