Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51181
Total
4084
Critical
15175
High
14817
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-54890 | UNKNOWN | — | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability … | Jul 27, 2026 |
| CVE-2026-51304 | HIGH | 7.5 | sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object … | Jul 27, 2026 |
| CVE-2026-51303 | CRITICAL | 9.8 | A use-after-free (UAF) vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via … | Jul 27, 2026 |
| CVE-2026-51302 | UNKNOWN | — | SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function … | Jul 27, 2026 |
| CVE-2026-51300 | UNKNOWN | — | A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program … | Jul 27, 2026 |
| CVE-2026-51298 | MEDIUM | 6.2 | sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses internal … | Jul 27, 2026 |
| CVE-2026-51297 | HIGH | 8.8 | sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal … | Jul 27, 2026 |
| CVE-2026-51296 | UNKNOWN | — | SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still … | Jul 27, 2026 |
| CVE-2026-47078 | UNKNOWN | — | Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and … | Jul 27, 2026 |
| CVE-2026-42792 | UNKNOWN | — | Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon (epmd) … | Jul 27, 2026 |
| CVE-2026-17574 | UNKNOWN | — | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the … | Jul 27, 2026 |
| CVE-2026-17573 | UNKNOWN | — | A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause … | Jul 27, 2026 |
| CVE-2026-17572 | UNKNOWN | — | Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) … | Jul 27, 2026 |
| CVE-2026-17530 | MEDIUM | 6.3 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function _build_handoff_toolset of the file AstrBot/astrbot/core/astr_agent_tool_exec.py of … | Jul 27, 2026 |
| CVE-2026-17529 | MEDIUM | 6.3 | A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astr_main_agent.py. The manipulation of the argument req.func_tool … | Jul 27, 2026 |
| CVE-2026-16812 | CRITICAL | 10.0 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO … | Jul 27, 2026 |
| CVE-2025-50455 | CRITICAL | 9.1 | SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input … | Jul 27, 2026 |
| CVE-2026-66477 | MEDIUM | 5.3 | Unauthenticated Broken Access Control in Gillion <= 4.13 versions. | Jul 27, 2026 |
| CVE-2026-66476 | MEDIUM | 4.9 | Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions. | Jul 27, 2026 |
| CVE-2026-66475 | MEDIUM | 5.9 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versions. | Jul 27, 2026 |
| CVE-2026-66474 | MEDIUM | 4.3 | Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions. | Jul 27, 2026 |
| CVE-2026-66448 | MEDIUM | 6.5 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. | Jul 27, 2026 |
| CVE-2026-66445 | MEDIUM | 6.5 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. | Jul 27, 2026 |
| CVE-2026-66442 | MEDIUM | 5.4 | Subscriber Broken Access Control in YayPricing <= 3.5.6 versions. | Jul 27, 2026 |
| CVE-2026-66438 | MEDIUM | 5.3 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. | Jul 27, 2026 |