Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
49177
Total
3940
Critical
14579
High
14345
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-64637 | CRITICAL | 9.9 | Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account. | Aug 07, 2026 |
| CVE-2026-64636 | HIGH | 7.7 | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel … | Aug 07, 2026 |
| CVE-2026-56818 | MEDIUM | 6.5 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth … | Aug 07, 2026 |
| CVE-2026-47364 | MEDIUM | 6.5 | In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: … | Aug 07, 2026 |
| CVE-2026-47363 | MEDIUM | 6.3 | In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (including OAuth tokens) from Intent extras … | Aug 07, 2026 |
| CVE-2026-47362 | MEDIUM | 4.6 | In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification title, message, recipient, service, … | Aug 07, 2026 |
| CVE-2026-47361 | MEDIUM | 6.4 | In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied … | Aug 07, 2026 |
| CVE-2026-44965 | MEDIUM | 5.5 | In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity) are exported with no … | Aug 07, 2026 |
| CVE-2026-44964 | MEDIUM | 6.5 | In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with … | Aug 07, 2026 |
| CVE-2026-19229 | MEDIUM | 5.3 | A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /_notes/ of the component Dreamweaver … | Aug 07, 2026 |
| CVE-2026-19213 | MEDIUM | 4.3 | A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCore/TraderAdapter.h of the component Pending Order Handler. The … | Aug 07, 2026 |
| CVE-2026-19082 | HIGH | 7.5 | Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags. copy_string_tags() computes … | Aug 07, 2026 |
| CVE-2026-71557 | MEDIUM | 6.3 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to … | Aug 07, 2026 |
| CVE-2026-71556 | HIGH | 7.1 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic … | Aug 07, 2026 |
| CVE-2026-68772 | HIGH | 8.0 | ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute … | Aug 07, 2026 |
| CVE-2026-67585 | UNKNOWN | — | Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthenticated remote attacker to abort the Erlang VM via crafted _entities representation … | Aug 07, 2026 |
| CVE-2026-66062 | MEDIUM | 5.3 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the content negotiation header parser used by SvelteKit's request … | Aug 07, 2026 |
| CVE-2026-20348 | HIGH | 7.5 | A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded … | Aug 07, 2026 |
| CVE-2026-20347 | HIGH | 7.5 | A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded … | Aug 07, 2026 |
| CVE-2026-20346 | HIGH | 7.5 | A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded … | Aug 07, 2026 |
| CVE-2026-20345 | HIGH | 7.5 | A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded … | Aug 07, 2026 |
| CVE-2026-20339 | HIGH | 7.5 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded … | Aug 07, 2026 |
| CVE-2026-20338 | HIGH | 7.5 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This … | Aug 07, 2026 |
| CVE-2026-20337 | HIGH | 7.5 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This … | Aug 07, 2026 |
| CVE-2026-19212 | MEDIUM | 4.3 | A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conversion. … | Aug 07, 2026 |