Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
48891
Total
3931
Critical
14494
High
14248
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-20349 | HIGH | 8.6 | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) … | Aug 11, 2026 |
| CVE-2026-18247 | UNKNOWN | — | A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially … | Aug 11, 2026 |
| CVE-2026-12571 | CRITICAL | 9.8 | An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover. | Aug 11, 2026 |
| CVE-2025-8087 | UNKNOWN | — | A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in … | Aug 11, 2026 |
| CVE-2025-61970 | UNKNOWN | — | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary … | Aug 11, 2026 |
| CVE-2025-48506 | UNKNOWN | — | Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code … | Aug 11, 2026 |
| CVE-2025-48505 | UNKNOWN | — | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary … | Aug 11, 2026 |
| CVE-2025-35987 | UNKNOWN | — | Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized … | Aug 11, 2026 |
| CVE-2025-35973 | UNKNOWN | — | Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary … | Aug 11, 2026 |
| CVE-2025-31938 | UNKNOWN | — | Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary … | Aug 11, 2026 |
| CVE-2025-31936 | UNKNOWN | — | Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of … | Aug 11, 2026 |
| CVE-2025-31356 | UNKNOWN | — | Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system software … | Aug 11, 2026 |
| CVE-2025-0041 | UNKNOWN | — | Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution. | Aug 11, 2026 |
| CVE-2026-9214 | UNKNOWN | — | Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and … | Aug 11, 2026 |
| CVE-2026-73080 | CRITICAL | 9.3 | SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volume_grpc_remote.go fetches a caller-supplied remote endpoint through weed/remote_storage/s3/s3_storage_client.go and writes the response into a … | Aug 11, 2026 |
| CVE-2026-73079 | HIGH | 8.5 | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys … | Aug 11, 2026 |
| CVE-2026-73078 | UNKNOWN | — | Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by … | Aug 11, 2026 |
| CVE-2026-73077 | UNKNOWN | — | Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K … | Aug 11, 2026 |
| CVE-2026-73076 | UNKNOWN | — | Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record … | Aug 11, 2026 |
| CVE-2026-73075 | UNKNOWN | — | Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchored popup … | Aug 11, 2026 |
| CVE-2026-73074 | UNKNOWN | — | Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t … | Aug 11, 2026 |
| CVE-2026-73072 | UNKNOWN | — | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a … | Aug 11, 2026 |
| CVE-2026-73071 | LOW | 3.3 | Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channel_fill() … | Aug 11, 2026 |
| CVE-2026-73070 | UNKNOWN | — | Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing … | Aug 11, 2026 |
| CVE-2026-73069 | CRITICAL | 9.1 | Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.15.0, Twenty allowed a workspace administrator with the DATA_MODEL permission to supply settings.asExpression for … | Aug 11, 2026 |