Recent vulnerabilities

Recent vulnerabilities from
Select from 70 available sources using the dropdown above.
ID Severity Description Published Updated
ghsa-w5xq-c4pf-ghq7
6.5 (3.1)
In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowS… 2026-05-21T06:31:31Z 2026-05-21T06:31:31Z
ghsa-f53p-382v-8pj7
9.8 (3.1)
The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Cod… 2026-05-21T06:31:31Z 2026-05-21T06:31:31Z
ghsa-c7gm-xj5j-p869
6.4 (3.1)
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via mu… 2026-05-21T06:31:31Z 2026-05-21T06:31:31Z
ghsa-3q6m-7jw2-r5m4
4.9 (3.1)
The WPB Floating Menu & Categories for WordPress – Sticky Side Menu with Icons plugin for WordPress… 2026-05-21T06:31:30Z 2026-05-21T06:31:30Z
ghsa-g63v-r3mf-m22g
10.0 (4.0)
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoi… 2026-05-21T03:30:24Z 2026-05-21T03:30:24Z
ghsa-fxrh-cwjh-m33v
10.0 (4.0)
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as ex… 2026-05-21T03:30:24Z 2026-05-21T03:30:24Z
ghsa-2rfp-x828-47hv
4.3 (3.1)
The Broadstreet plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versi… 2026-05-21T03:30:24Z 2026-05-21T03:30:24Z
ghsa-p4w9-3pj8-mhq7
6.5 (3.1)
A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Deb… 2026-05-21T00:30:27Z 2026-05-21T00:30:27Z
ghsa-mrxg-pq5w-gjmm
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-05-21T00:30:27Z 2026-05-21T00:30:27Z
ghsa-h295-pfx3-r298
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These … 2026-05-21T00:30:27Z 2026-05-21T03:30:24Z
ghsa-9q56-xf64-q987
6.5 (3.1)
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes… 2026-05-21T00:30:27Z 2026-05-21T00:30:27Z
ghsa-5mhm-vj5h-r98h
3.3 (3.1)
4.6 (4.0)
Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents wit… 2026-05-21T00:30:27Z 2026-05-21T00:30:27Z
ghsa-xjvj-qvp3-h2cg
5.3 (3.1)
Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 all… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-w45w-c9pr-p65f
8.5 (4.0)
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Softwar… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-q8x9-c3xr-45r5
7.5 (3.1)
Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-p85v-6f3q-83wg
8.8 (3.1)
Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to exec… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-mqc5-86vp-hmff
7.6 (3.1)
8.4 (4.0)
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnera… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-mjc4-qqxc-7h36
Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions … 2026-05-20T21:31:33Z 2026-05-21T00:30:27Z
ghsa-mhhc-85f5-7chm
8.8 (3.1)
Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to … 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-m56p-rp6v-288r
6.5 (3.1)
Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-jj2w-phrm-32r8
9.8 (3.1)
9.3 (4.0)
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-hfjr-4239-84fm
8.3 (4.0)
A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action ac… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-hcc9-h975-pvc2
9.3 (4.0)
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Softwar… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-gfvj-j222-m85v
5.1 (4.0)
The CSP report endpoint intended to limit logged CSP reports to 1 KB but incorrectly allowed report… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-c89f-cvmv-ffjf
9.8 (3.1)
9.3 (4.0)
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerabilit… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-49pv-jm6v-mv97
8.8 (3.1)
Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to exec… 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-3qfq-f4q6-pq76
9.4 (4.0)
A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due … 2026-05-20T21:31:33Z 2026-05-20T21:31:33Z
ghsa-w7h5-vx9m-v9jx
10.0 (3.1)
Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommer… 2026-05-20T21:31:32Z 2026-05-20T21:31:32Z
ghsa-rgw2-264p-h9j3
4.2 (3.1)
Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a re… 2026-05-20T21:31:32Z 2026-05-20T21:31:32Z
ghsa-prq9-v8fh-p62p
8.8 (3.1)
Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to exe… 2026-05-20T21:31:32Z 2026-05-20T21:31:32Z