Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
26442
Total
1955
Critical
7978
High
8230
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-11604 | UNKNOWN | — | An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a … | Jun 10, 2026 |
| CVE-2026-10143 | HIGH | 7.5 | kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop … | Jun 10, 2026 |
| CVE-2026-10142 | HIGH | 7.5 | kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang … | Jun 10, 2026 |
| CVE-2026-0274 | UNKNOWN | — | An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected … | Jun 10, 2026 |
| CVE-2026-0273 | UNKNOWN | — | A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root … | Jun 10, 2026 |
| CVE-2026-0272 | UNKNOWN | — | A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions … | Jun 10, 2026 |
| CVE-2026-0271 | UNKNOWN | — | A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with … | Jun 10, 2026 |
| CVE-2026-0270 | UNKNOWN | — | A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the … | Jun 10, 2026 |
| CVE-2026-0269 | UNKNOWN | — | A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using … | Jun 10, 2026 |
| CVE-2026-0268 | UNKNOWN | — | A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does … | Jun 10, 2026 |
| CVE-2026-0267 | UNKNOWN | — | An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, … | Jun 10, 2026 |
| CVE-2026-0266 | UNKNOWN | — | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. … | Jun 10, 2026 |
| CVE-2022-48575 | LOW | 3.5 | A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue … | Jun 10, 2026 |
| CVE-2022-26758 | HIGH | 7.1 | A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is … | Jun 10, 2026 |
| CVE-2026-6893 | HIGH | 8.8 | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration … | Jun 10, 2026 |
| CVE-2026-50127 | MEDIUM | 5.9 | Weblate is a web based localization tool. From version 5.15 to before version 2026.6, Weblate's VCS_RESTRICT_PRIVATE did not properly account for some transitional IPv6 ranges, … | Jun 10, 2026 |
| CVE-2026-46683 | UNKNOWN | — | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a … | Jun 10, 2026 |
| CVE-2026-46643 | UNKNOWN | — | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.1, on POSIX, escapeshellarg(‘/usr/bin/wkhtmltopdf’) … | Jun 10, 2026 |
| CVE-2026-46529 | UNKNOWN | — | Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to … | Jun 10, 2026 |
| CVE-2026-45106 | MEDIUM | 4.6 | Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping. Any … | Jun 10, 2026 |
| CVE-2026-1220 | HIGH | 7.5 | Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security … | Jun 10, 2026 |
| CVE-2026-50639 | MEDIUM | 6.5 | Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by newlines, … | Jun 10, 2026 |
| CVE-2026-50638 | UNKNOWN | — | Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by newlines, … | Jun 10, 2026 |
| CVE-2026-50637 | UNKNOWN | — | Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions) allow mutiple metrics,separated by newlines, to be sent … | Jun 10, 2026 |
| CVE-2026-11626 | UNKNOWN | — | CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker … | Jun 10, 2026 |