Recent vulnerabilities
Recent vulnerabilities from
Select from 70 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-47270 |
6.3 (3.1)
|
pam_usb: strtok() race condition in multi-threaded PAM… |
mcdope |
pam_usb |
2026-05-27T20:10:37.108Z | 2026-05-27T20:10:37.108Z |
| CVE-2026-47269 |
7.4 (3.1)
|
pam_usb: deny_remote feature incorrectly classifies IP… |
mcdope |
pam_usb |
2026-05-27T20:11:44.975Z | 2026-05-27T20:11:44.975Z |
| CVE-2026-45137 |
8.2 (3.1)
|
Anchor: Program<'info, System> is not properly validated |
solana-foundation |
anchor |
2026-05-27T20:52:23.381Z | 2026-05-27T20:52:23.381Z |
| CVE-2026-45136 |
8.6 (4.0)
|
claude-code-cache-fix: Local code execution via Python… |
cnighswonger |
claude-code-cache-fix |
2026-05-27T20:48:22.312Z | 2026-05-27T20:48:22.312Z |
| CVE-2026-44713 |
8.8 (3.1)
|
pam_usb: Command injection via $TMUX environment varia… |
mcdope |
pam_usb |
2026-05-27T20:13:13.193Z | 2026-05-27T20:13:13.193Z |
| CVE-2026-44712 |
8.2 (3.1)
|
pam_usb: Shell injection via device UUID and username … |
mcdope |
pam_usb |
2026-05-27T20:24:23.131Z | 2026-05-27T20:24:23.131Z |
| CVE-2026-44711 |
7.9 (3.1)
|
pam_usb: Symlink attacks on pad directory and pad file… |
mcdope |
pam_usb |
2026-05-27T20:18:46.385Z | 2026-05-27T20:18:46.385Z |
| CVE-2026-44710 |
4.6 (3.1)
|
pam_usb: NULL pointer dereference from UDisks device f… |
mcdope |
pam_usb |
2026-05-27T20:19:35.374Z | 2026-05-27T20:19:35.374Z |
| CVE-2026-44709 |
7.8 (3.1)
|
pam_usb: PINENTRY_FALLBACK_APP environment variable al… |
mcdope |
pam_usb |
2026-05-27T20:20:52.529Z | 2026-05-27T20:20:52.529Z |
| CVE-2026-44660 |
8.7 (4.0)
|
UltraJSON: Memory Leak in ujson.dump() on Write Failure |
ultrajson |
ultrajson |
2026-05-27T20:42:59.830Z | 2026-05-27T20:42:59.830Z |
| CVE-2026-21785 |
4 (3.1)
|
HCL BigFix Remote Control Server WebUI is affected by … |
HCLSoftware |
BigFix Remote Control Server |
2026-05-27T20:15:56.441Z | 2026-05-27T20:15:56.441Z |
| CVE-2026-9759 |
5.5 (3.1)
|
NULL Pointer Dereference in Wireshark |
Wireshark Foundation |
Wireshark |
2026-05-27T18:33:18.742Z | 2026-05-27T19:36:26.557Z |
| CVE-2026-8364 |
9.8 (3.1)
|
Gladinet Triofox Missing Authentication for Critical F… |
Gladinet |
Triofox |
2026-05-27T19:38:01.455Z | 2026-05-27T20:25:18.885Z |
| CVE-2026-8363 |
9.8 (3.1)
|
Gladinet Triofox Stack-based Buffer Overflow in WOSDev… |
Gladinet |
Triofox |
2026-05-27T19:40:33.139Z | 2026-05-27T20:25:06.046Z |
| CVE-2026-8362 |
9.8 (3.1)
|
Gladinet Triofox Stack-based Buffer Overflow in WOSDef… |
Gladinet |
Triofox |
2026-05-27T19:42:08.859Z | 2026-05-27T19:42:08.859Z |
| CVE-2026-8361 |
7.5 (3.1)
|
Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll |
Gladinet |
Triofox |
2026-05-27T19:44:38.581Z | 2026-05-27T20:24:45.910Z |
| CVE-2026-8360 |
7.5 (3.1)
|
Gladinet Triofox Unchecked Return Value to NULL Pointe… |
Gladinet |
Triofox |
2026-05-27T19:47:29.646Z | 2026-05-27T20:25:57.857Z |
| CVE-2026-8359 |
7.5 (3.1)
|
Gladinet Triofox WOSHttpStatusModule.dll NULL Function… |
Gladinet |
Triofox |
2026-05-27T19:49:18.405Z | 2026-05-27T20:26:19.922Z |
| CVE-2026-49009 |
N/A
|
Northern.tech Mender Server v4.1.0, v4.0.1 and be… |
n/a |
n/a |
2026-05-27T00:00:00.000Z | 2026-05-27T18:36:53.794Z |
| CVE-2026-48792 |
4.4 (3.1)
|
pam_usb: pusb_has_virtual_input_device() silently disc… |
mcdope |
pam_usb |
2026-05-27T19:55:46.392Z | 2026-05-27T19:55:46.392Z |
| CVE-2026-48066 |
5.7 (3.1)
|
pam_usb: Thread-unsafe static pointer in log.c causes … |
mcdope |
pam_usb |
2026-05-27T19:57:42.557Z | 2026-05-27T19:59:06.293Z |
| CVE-2026-48065 |
6.7 (3.1)
|
pam_usb: Unchecked integer multiplication before xmall… |
mcdope |
pam_usb |
2026-05-27T19:58:36.447Z | 2026-05-27T19:58:36.447Z |
| CVE-2026-48064 |
8.1 (3.1)
|
pam_usb: PAM_RHOST check skipped when deny_remote=fals… |
mcdope |
pam_usb |
2026-05-27T19:59:53.496Z | 2026-05-27T19:59:53.496Z |
| CVE-2026-47274 |
6.3 (3.1)
|
pam_usb: Uncontrolled search path in pam_usb tools all… |
mcdope |
pam_usb |
2026-05-27T20:02:38.484Z | 2026-05-27T20:02:38.484Z |
| CVE-2026-47273 |
6.5 (3.1)
|
pam_usb: XPath injection via PAM-supplied identifiers … |
mcdope |
pam_usb |
2026-05-27T20:03:39.297Z | 2026-05-27T20:03:39.297Z |
| CVE-2026-47272 |
7.1 (3.1)
|
pam_usb: OTP pad authentication bypass via missing sys… |
mcdope |
pam_usb |
2026-05-27T20:06:15.388Z | 2026-05-27T20:06:15.388Z |
| CVE-2026-47271 |
5.1 (3.1)
|
pam_usb: OOM guards removed by -DNDEBUG cause NULL der… |
mcdope |
pam_usb |
2026-05-27T20:08:02.552Z | 2026-05-27T20:08:02.552Z |
| CVE-2026-47161 |
8.7 (4.0)
|
RELATE Vulnerable to Remote Code Execution (RCE) via I… |
inducer |
relate |
2026-05-27T18:31:55.375Z | 2026-05-27T18:31:55.375Z |
| CVE-2026-45134 |
7.1 (3.1)
|
LangSmith Client SDK: Public prompt pull deserializes … |
langchain-ai |
langsmith-sdk |
2026-05-27T19:35:32.662Z | 2026-05-27T19:35:32.662Z |
| CVE-2026-45108 |
8.4 (3.1)
|
Himmelblau: Authentication Bypass via Cross-User Local… |
himmelblau-idm |
himmelblau |
2026-05-27T18:53:29.232Z | 2026-05-27T18:53:29.232Z |