cve.li

Recent

CVE-2026-67178CWE-601

Open Redirect in MISP Installer-Generated Apache Configuration

Published 2026-07-28 by CIRCL

CVE-2026-66299CWE-400

Apache Tomcat: DoS via WebSocket chat example

Published 2026-07-28 by apache

CVE-2026-63727CWE-648

Anchore Enterprise Privilege Escalation via User Management API

Published 2026-07-28 by VulnCheck

CVE-2026-8164CWE-427

Search Order Hijacking in ArkSigner's ArkSigner Desktop Client

Published 2026-07-28 by TR-CERT

CVE-2026-7521CWE-22

SAML certificate deletion allows path traversal to delete arbitrary files outside the config directory

Published 2026-07-28 by Mattermost

CVE-2026-67174CWE-79

DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

Published 2026-07-28 by CIRCL

CVE-2026-66713CWE-502

Apache Axis2/Java: deserialization of untrusted Data

Published 2026-07-28 by apache

CVE-2026-59878CWE-20

Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Published 2026-07-28 by apache

CVE-2026-61487CWE-285

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

Published 2026-07-28 by apache

CVE-2026-67173CWE-918

Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests

Published 2026-07-28 by CIRCL

CVE-2026-66922CWE-1321

Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Published 2026-07-28 by CIRCL

CVE-2026-66921CWE-79

Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References

Published 2026-07-28 by CIRCL

CVE-2026-66920CWE-674CWE-400

Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

Published 2026-07-28 by CIRCL

CVE-2026-66919CWE-79

Stored DOM-Based Cross-Site Scripting in Node Modal Headers

Published 2026-07-28 by CIRCL

CVE-2026-18038CWE-200CWE-284

nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure

Published 2026-07-28 by VulDB

CVE-2026-18047CWE-288

Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash

Published 2026-07-28 by redhat

CVE-2026-66918CWE-79

DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons

Published 2026-07-28 by CIRCL

CVE-2026-65881CWE-1188CWE-200

Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1

Published 2026-07-28 by Joomla

CVE-2026-15393CWE-79

Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute

Published 2026-07-28 by Wordfence

CVE-2026-15016CWE-79

Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Published 2026-07-28 by Wordfence

Load more ↓