Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51667
Total
4097
Critical
15338
High
14987
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-38766 | UNKNOWN | — | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub_186f4 function | Jul 22, 2026 |
| CVE-2026-38765 | UNKNOWN | — | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys | Jul 22, 2026 |
| CVE-2026-38763 | UNKNOWN | — | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub_13828 | Jul 22, 2026 |
| CVE-2026-16630 | MEDIUM | 5.3 | A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file package.json. The manipulation leads to … | Jul 22, 2026 |
| CVE-2026-16629 | MEDIUM | 5.3 | A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the file source/platforms/git/localGetFileAtSHA.ts of the component CLI. Such manipulation … | Jul 22, 2026 |
| CVE-2026-16628 | MEDIUM | 5.3 | A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec of the component JIT Plugin Entry Handler. Performing … | Jul 22, 2026 |
| CVE-2026-64798 | UNKNOWN | — | Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random … | Jul 22, 2026 |
| CVE-2026-64797 | UNKNOWN | — | Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. … | Jul 22, 2026 |
| CVE-2026-64796 | UNKNOWN | — | Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to … | Jul 22, 2026 |
| CVE-2026-64795 | UNKNOWN | — | Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal … | Jul 22, 2026 |
| CVE-2026-64794 | UNKNOWN | — | Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently … | Jul 22, 2026 |
| CVE-2026-64793 | UNKNOWN | — | Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or … | Jul 22, 2026 |
| CVE-2026-64792 | UNKNOWN | — | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content … | Jul 22, 2026 |
| CVE-2026-64791 | UNKNOWN | — | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not … | Jul 22, 2026 |
| CVE-2026-63685 | UNKNOWN | — | Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and … | Jul 22, 2026 |
| CVE-2026-63684 | UNKNOWN | — | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor … | Jul 22, 2026 |
| CVE-2026-63683 | UNKNOWN | — | Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote … | Jul 22, 2026 |
| CVE-2026-63281 | UNKNOWN | — | Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries. | Jul 22, 2026 |
| CVE-2026-63280 | UNKNOWN | — | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens … | Jul 22, 2026 |
| CVE-2026-63265 | UNKNOWN | — | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints … | Jul 22, 2026 |
| CVE-2026-13089 | UNKNOWN | — | OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin … | Jul 22, 2026 |
| CVE-2025-60835 | UNKNOWN | — | An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. | Jul 22, 2026 |
| CVE-2025-50330 | UNKNOWN | — | An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via the zipgenius.exe. | Jul 22, 2026 |
| CVE-2025-50329 | UNKNOWN | — | An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe. | Jul 22, 2026 |
| CVE-2025-50327 | UNKNOWN | — | An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the … | Jul 22, 2026 |