394400CVEs tracked
4643Last 7 days
16081Last 30 days
1756CISA KEV
Published CVEs
CRITICALHIGHMEDIUMLOWUnscored
96805 CVEs in this period · counted 2026-10-25 15:15 UTC, refreshed hourly
Recently published CVEs
4643 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-116160 | 4.8
CNA v4.0 |
LocalNo authUser action
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, whe… |
2026-10-25 |
| CVE-2026-116159 | 4.8
CNA v4.0 |
LocalNo authUser action
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up after use. Attackers can … |
2026-10-25 |
| CVE-2026-116158 | 2.0
CNA v4.0 |
LocalNo authUser actionConditions
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Memory Leak in magick compare ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated fail… |
2026-10-25 |
| CVE-2026-116157 | 4.8
CNA v4.0 |
LocalNo authUser action
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through… |
2026-10-25 |
| CVE-2026-116156 | 4.8
CNA v4.0 |
LocalNo authUser action
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the … |
2026-10-25 |
| CVE-2026-116155 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various decoders. Attackers can supply images with a crafted XMP profile that leak memory… |
2026-10-25 |
| CVE-2026-116154 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Lim… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can … |
2026-10-25 |
| CVE-2026-116153 | 2.0
CNA v4.0 |
LocalNo authUser actionConditions
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supp… |
2026-10-25 |
| CVE-2026-116152 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path. Attackers can supply crafted MAT files that trigger… |
2026-10-25 |
| CVE-2026-116151 | 6.3
CNA v4.0 |
NetworkNo authNo interactionConditions
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image. Attackers can supply crafted imag… |
2026-10-25 |
| CVE-2026-116150 | 2.3
CNA v4.0 |
NetworkNo authUser actionConditions
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX en… |
2026-10-25 |
| CVE-2026-116149 | 7.2
CNA v4.0 |
NetworkLoginNo interaction
C:NI:HA:H
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compr… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to … |
2026-10-25 |
| CVE-2026-116148 | 4.8
CNA v4.0 |
LocalNo authUser action
Scope change
C:LI:NA:N
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawin… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into … |
2026-10-25 |
| CVE-2026-116147 | 6.3
CNA v4.0 |
NetworkNo authNo interactionConditions
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Deco… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use. Attackers can supply a… |
2026-10-25 |
| CVE-2026-116146 | 6.3
CNA v4.0 |
NetworkNo authNo interactionConditions
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted MSL image. Attackers can supply crafted … |
2026-10-25 |
| CVE-2026-116145 | 1.8
CNA v4.0 |
LocalAdminNo interactionConditions
C:LI:LA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An attacker able to supply inp… |
2026-10-25 |
| CVE-2026-116144 | 4.8
CNA v4.0 |
LocalNo authUser action
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with … |
2026-10-25 |
| CVE-2026-116143 | 4.8
CNA v4.0 |
LocalLoginNo interaction
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Deco… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented.… |
2026-10-25 |
| CVE-2026-116142 | 4.8
CNA v4.0 |
LocalNo authUser action
C:LI:NA:N
|
— | ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted im… |
2026-10-25 |
| CVE-2026-116141 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur after decoding. Attacker… |
2026-10-25 |
| CVE-2026-116140 | 4.8
CNA v4.0 |
LocalNo authUser action
C:NI:LA:N
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to proc… |
2026-10-25 |
| CVE-2026-116139 | 5.1
CNA v4.0 |
NetworkLoginUser action
Scope change
C:LI:LA:N
|
— | WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows authenticated commenters to inject JavaScript because markDownToHTML() preserves event-handler attribut… |
2026-10-25 |
| CVE-2026-116052 | 4.3
CNA (via NVD) v3.1 |
NetworkNo authUser action
C:NI:LA:N
|
— | LinkStackOrg LinkStack cross-site request forgery A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploita… |
2026-10-25 |
| CVE-2026-116137 | 3.7
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:NI:LA:N
|
— | adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() check by using canonically equivalent entry names like './hello.txt' and 'hello.txt'… |
2026-10-25 |
| CVE-2026-116136 | 5.9
CNA (via NVD) v3.1 |
NetworkLoginNo interactionConditions
C:HI:LA:N
|
— | ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows staff users to share files without authorization by linking file versions. Attack… |
2026-10-25 |
| CVE-2026-116073 | 6.5
CNA (via NVD) v3.1 |
NetworkNo authUser action
C:NI:HA:N
|
— | Leon before commit 50df142 Path Traversal via /download model Command Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-encoded separators. Attack… |
2026-10-25 |
| CVE-2026-116072 | 5.4
CNA (via NVD) v3.1 |
NetworkNo authUser action
C:LI:LA:N
|
— | Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCus… |
2026-10-25 |
| CVE-2026-116071 | 5.9
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:HI:NA:N
|
— | rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers … |
2026-10-25 |
| CVE-2026-116070 | 6.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:N
|
— | Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. A… |
2026-10-25 |
| CVE-2026-116069 | 6.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:N
|
— | NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value… |
2026-10-25 |
| CVE-2026-116068 | 8.8
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
C:HI:HA:H
|
— | Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Route… Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values… |
2026-10-25 |
| CVE-2026-116067 | 8.2
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:LA:N
|
— | Paisa before 0.7.8 Path Traversal via Editor and Sheet API Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups th… |
2026-10-25 |
| CVE-2026-116066 | 6.8
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
Scope change
C:HI:NA:N
|
— | Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers c… |
2026-10-25 |
| CVE-2026-116050 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | krupalshah Employee Recruitment System Registration registerform3.php sql injection A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the compo… |
2026-10-25 |
| CVE-2026-116049 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | krupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql… A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysql_query of the file /source/registerform2.php o… |
2026-10-25 |
| CVE-2026-116048 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql inject… A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query of the file /source/regi… |
2026-10-25 |
| CVE-2026-116047 | 4.3
CNA (via NVD) v3.1 |
NetworkNo authUser action
PoC
C:NI:LA:N
|
— | Privoce Vocechat Query Parameter widget.html cross site scripting A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the … |
2026-10-25 |
| CVE-2026-116046 | 5.3
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:LI:LA:L
|
— | eventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversal A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustomDoc/rmCustomDoc of the file packages/sdk/src/custom-docs.ts of the component Cus… |
2026-10-25 |
| CVE-2026-116045 | 4.3
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
PoC
C:LI:NA:N
|
— | 1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP … |
2026-10-25 |
| CVE-2026-94295 | — | Not scored | — | Chikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forger… The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notification actually originated from the payment provider before marking the associated or… |
2026-10-25 |
| CVE-2026-116044 | 6.3
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
PoC
C:LI:LA:L
|
— | prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL Fi… |
2026-10-25 |
| CVE-2026-115251 | — | Not scored | — | Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click… The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routin… |
2026-10-25 |
| CVE-2026-115214 | — | Not scored | — | Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Rol… The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenti… |
2026-10-25 |
| CVE-2026-115183 | — | Not scored | — | Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding HTML entities in it, allowing users with the Contributor role and above to … |
2026-10-25 |
| CVE-2026-114743 | — | Not scored | — | InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settin… The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its InstaWP Connect WordPress plugin before 0.1.4.2-settings update action, verifying only a nonce, allowin… |
2026-10-25 |
| CVE-2026-114742 | — | Not scored | — | WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing users with contributor-level access and above to modify, reconfigure and pu… |
2026-10-25 |
| CVE-2026-114741 | — | Not scored | — | WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and m… |
2026-10-25 |
| CVE-2026-114740 | — | Not scored | — | WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizar… The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its setup wizard, allowing users with the Contributor role and above to create and publi… |
2026-10-25 |
| CVE-2026-111981 | — | Not scored | — | GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_ad… The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, allowing users who have been granted donor-report (view) access but not donor-edit… |
2026-10-25 |
| CVE-2026-111980 | — | Not scored | — | GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability … The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages… |
2026-10-25 |