CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-112395 json | Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while ... | |
| CVE-2026-112394 json | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input bu... | |
| CVE-2026-112393 json | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _... | |
| CVE-2026-112391 json | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while... | |
| CVE-2026-112390 json | Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame co... | |
| CVE-2026-76788 json | The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral ... | |
| CVE-2026-76787 json | The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_prob... | |
| CVE-2026-112779 json | Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language co... | |
| CVE-2026-112377 json | CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, a... | |
| CVE-2026-112302 json | A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file... | |
| CVE-2026-112301 json | A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::... | |
| CVE-2026-112300 json | A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker... | |
| CVE-2026-112299 json | A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrl... | |
| CVE-2026-111946 json | Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When... | |
| CVE-2026-109437 json | Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox b... | |
| CVE-2026-109434 json | Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to imperso... | |
| CVE-2026-55644 json | Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowli... | |
| CVE-2026-11319 json | TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceive... | |
| CVE-2025-60482 json | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-g... | |
| CVE-2026-112363 json | Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows u... | |
| CVE-2026-107188 json | A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be speci... | |
| CVE-2026-107187 json | A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow ru... | |
| CVE-2026-107186 json | An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be se... | |
| CVE-2026-107084 json | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circ... | |
| CVE-2026-107083 json | SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/report... | |
| CVE-2026-107082 json | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the... | |
| CVE-2026-105810 json | Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An a... | |
| CVE-2025-60480 json | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-re... | |
| CVE-2025-55667 json | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-maste... | |
| CVE-2025-55654 json | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to ... | |
| CVE-2026-112310 json | docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images b... | |
| CVE-2026-112309 json | @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to ov... | |
| CVE-2026-112304 json | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with ... | |
| CVE-2026-112303 json | GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource ... | |
| CVE-2026-111057 json | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a mis... | |
| CVE-2026-111045 json | CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the worksp... | |
| CVE-2026-109433 json | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp ... | |
| CVE-2026-109432 json | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValida... | |
| CVE-2026-107571 json | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local aut... | |
| CVE-2026-107569 json | Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated att... | |
| CVE-2026-107568 json | Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.... | |
| CVE-2026-107567 json | Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthe... | |
| CVE-2026-107566 json | Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0... | |
| CVE-2026-107081 json | SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_l... | |
| CVE-2026-112329 json | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save_new_message h... | |
| CVE-2026-112328 json | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX ... | |
| CVE-2026-112296 json | FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to g... | |
| CVE-2026-112295 json | FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protecte... | |
| CVE-2026-112294 json | FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows authenti... | |
| CVE-2026-112293 json | BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner team me... | |
| CVE-2026-112292 json | CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify a... | |
| CVE-2026-112291 json | Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index end... | |
| CVE-2026-112289 json | Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by sto... | |
| CVE-2026-112288 json | Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions... | |
| CVE-2026-112287 json | Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allo... | |
| CVE-2026-112286 json | Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated... | |
| CVE-2026-112285 json | Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to byp... | |
| CVE-2026-112284 json | libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the 78-e... | |
| CVE-2026-112281 json | libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decode... | |
| CVE-2026-112280 json | libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers ... | |
| CVE-2026-112279 json | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malici... | |
| CVE-2026-112278 json | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows mal... | |
| CVE-2026-112277 json | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious ... | |
| CVE-2026-112276 json | Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memo... | |
| CVE-2026-112275 json | Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder ... | |
| CVE-2026-112274 json | libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to rea... | |
| CVE-2026-112273 json | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote a... | |
| CVE-2026-112272 json | Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c tha... | |
| CVE-2026-112271 json | libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayi... | |
| CVE-2026-112268 json | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the dat... | |
| CVE-2026-112263 json | Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell comma... | |
| CVE-2026-112262 json | RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write... | |
| CVE-2026-112112 json | An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSp... | |
| CVE-2026-112111 json | The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tconte... | |
| CVE-2026-111939 json | Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create... | |
| CVE-2026-111938 json | Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other... | |
| CVE-2026-111937 json | Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other... | |
| CVE-2026-111936 json | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in securi... | |
| CVE-2026-111935 json | NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers t... | |
| CVE-2026-111925 json | Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside... | |
| CVE-2026-111915 json | Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrar... | |
| CVE-2026-111899 json | KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated hou... | |
| CVE-2026-104679 json | VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially craf... | |
| CVE-2026-112063 json | libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers... | |
| CVE-2026-112061 json | librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-a... | |
| CVE-2026-112060 json | librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode... | |
| CVE-2026-112059 json | libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the sc... | |
| CVE-2026-112058 json | VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash appli... | |
| CVE-2026-112057 json | libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attacke... | |
| CVE-2026-110494 json | Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to ... | |
| CVE-2026-110324 json | The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and unfollow) ... | |
| CVE-2026-110311 json | Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which matched... | |
| CVE-2026-109844 json | `GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that the user... | |
| CVE-2026-109553 json | Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only princi... | |
| CVE-2026-107686 json | The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users withou... | |
| CVE-2026-105964 json | The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who can r... | |
| CVE-2026-105661 json | Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home handler ... | |
| CVE-2026-104627 json | The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without checking that... | |
| CVE-2026-97204 json | Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the... | |
| CVE-2026-112056 json | wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attac... |