|
Medium
|
30 Apr 2026 |
30 Apr 2026 |
CPAI-2026-3406
|
|
CVE-2026-20959
|
Microsoft SharePoint Server Cross-Site Scripting (CVE-2026-20959)
|
|
High
|
30 Apr 2026 |
30 Apr 2026 |
CPAI-2026-3764
|
|
CVE-2026-22557
|
Ubiquiti UniFi Network Application Directory Traversal (CVE-2026-22557)
|
|
Medium
|
29 Apr 2026 |
29 Apr 2026 |
CPAI-2025-15506
|
|
CVE-2025-4664
|
Google Chrome Information Disclosure (CVE-2025-4664)
|
|
High
|
28 Apr 2026 |
29 Apr 2026 |
CPAI-2026-3635
|
|
CVE-2026-3844
|
WordPress Breeze Cache Plugin Arbitrary File Upload (CVE-2026-3844)
|
|
High
|
28 Apr 2026 |
28 Apr 2026 |
CPAI-2026-3566
|
|
CVE-2026-3844
|
WordPress Breeze Cache Plugin Arbitrary File Upload (CVE-2026-3844)
|
|
High
|
27 Apr 2026 |
28 Apr 2026 |
CPAI-2025-15464
|
|
CVE-2025-32794
|
OpenEMR Cross-Site Scripting (CVE-2025-32794)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2025-15293
|
|
CVE-2025-32794
|
OpenEMR Cross-Site Scripting (CVE-2025-32794)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3372
|
|
CVE-2026-39813
|
Fortinet FortiSandbox Directory Traversal (CVE-2026-39813)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3371
|
|
CVE-2026-1157
|
TOTOLINK LR350 Buffer Overflow (CVE-2026-1157)
|
|
Critical
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3370
|
|
CVE-2026-5852
|
Totolink A7100RU Command Injection (CVE-2026-5852)
|
|
Critical
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3369
|
|
CVE-2026-5853
|
Totolink A7100RU Command Injection (CVE-2026-5853)
|
|
Critical
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3368
|
|
CVE-2026-5850
|
Totolink A7100RU Command Injection (CVE-2026-5850)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3367
|
|
CVE-2026-5851
|
Totolink A7100RU Command Injection (CVE-2026-5851)
|
|
Critical
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3366
|
|
CVE-2026-5854
|
Totolink A7100RU Command Injection (CVE-2026-5854)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3355
|
|
CVE-2026-40871
|
mailcow: dockerized SQL Injection (CVE-2026-40871)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3346
|
|
CVE-2026-6204
|
LibreNMS Remote Code Execution (CVE-2026-6204)
|
|
Critical
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3345
|
|
CVE-2026-6195
|
Totolink A7100RU Command Injection (CVE-2026-6195)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2026-3344
|
|
CVE-2026-6483
|
Wavlink WL-WN530H4 Command Injection (CVE-2026-6483)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2025-15285
|
|
CVE-2025-71258
|
BMC FootPrints ITSM Server-Side Request Forgery (CVE-2025-71258)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2025-15290
|
|
CVE-2025-71259
|
BMC FootPrints ITSM Server-Side Request Forgery (CVE-2025-71259)
|
|
High
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2021-3075
|
|
CVE-2021-30117
|
Kaseya VSA SQL Injection (CVE-2021-30117)
|
|
Medium
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2025-15318
|
|
CVE-2025-34301
|
IPFire Cross-Site Scripting (CVE-2025-34301)
|
|
Medium
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2025-15311
|
|
CVE-2025-34309
|
IPFire Cross-Site Scripting (CVE-2025-34309)
|
|
Critical
|
27 Apr 2026 |
27 Apr 2026 |
CPAI-2025-15321
|
|
CVE-2025-36604
|
Dell Unity Operating Environment Command Injection (CVE-2025-36604)
|
|
Critical
|
26 Apr 2026 |
26 Apr 2026 |
CPAI-2026-3291
|
|
CVE-2026-30824
|
FlowiseAI Flowise Authentication Bypass (CVE-2026-30824)
|
|
Critical
|
26 Apr 2026 |
26 Apr 2026 |
CPAI-2026-3442
|
|
CVE-2026-39987
|
Marimo Remote Code Execution (CVE-2026-39987)
|
|
High
|
16 Apr 2026 |
26 Apr 2026 |
CPAI-2026-3218
|
|
CVE-2026-39808
|
Fortinet FortiSandbox Command Injection (CVE-2026-39808)
|
|
Critical
|
5 Mar 2026 |
26 Apr 2026 |
CPAI-2026-1291
|
|
CVE-2026-20127
|
Cisco Catalyst SD-WAN Authentication Bypass (CVE-2026-20127)
|
|
Critical
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2026-3390
|
|
CVE-2026-22252
|
LibreChat Command Injection (CVE-2026-22252)
|
|
High
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2026-3386
|
|
CVE-2026-33634
|
Aquasec Trivy Remote Code Execution (CVE-2026-33634)
|
|
High
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2026-3255
|
|
CVE-2026-3808
|
Tenda FH1202 Buffer Overflow (CVE-2026-3808)
|
|
Critical
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2025-15236
|
|
CVE-2025-5120
|
HuggingFace SmolAgents Remote Code Execution (CVE-2025-5120)
|
|
High
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2026-3253
|
|
CVE-2026-30822
|
FlowiseAI Flowise Arbitrary File Write (CVE-2026-30822)
|
|
High
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2019-3647
|
|
CVE-2019-25487
|
SAPIDO RB-1732 Remote Code Execution (CVE-2019-25487)
|
|
High
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2025-15235
|
|
CVE-2025-10891
|
Google Chrome Integer Overflow (CVE-2025-10891)
|
|
Critical
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2025-15234
|
|
CVE-2025-68705
|
RustFS Directory Traversal (CVE-2025-68705)
|
|
Medium
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2025-15225
|
|
CVE-2025-68477
|
Langflow Server-Side Request Forgery (CVE-2025-68477)
|
|
Critical
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2024-5996
|
|
CVE-2024-5452
|
LightningAI PyTorch Lightning Remote Code Execution (CVE-2024-5452)
|
|
High
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2026-3230
|
|
CVE-2026-22666
|
Dolibarr ERP/CRM Remote Code Execution (CVE-2026-22666)
|
|
Medium
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2025-15302
|
|
CVE-2025-39946
|
Linux Kernel Out of Bounds Write (CVE-2025-39946)
|
|
Medium
|
23 Apr 2026 |
23 Apr 2026 |
CPAI-2025-15316
|
|
CVE-2025-8100
|
WordPress Element Pack Plugin Cross-Site Scripting (CVE-2025-8100)
|
|
High
|
16 Apr 2026 |
23 Apr 2026 |
CPAI-2026-3391
|
|
CVE-2026-21710
|
Node.js Denial of Service (CVE-2026-21710)
|
|
Critical
|
28 Jan 2026 |
23 Apr 2026 |
CPAI-2026-0685
|
|
CVE-2026-24423
|
SmarterTools SmarterMail Remote Code Execution (CVE-2026-24423)
|
|
Critical
|
5 Jan 2026 |
23 Apr 2026 |
CPAI-2025-15329
|
|
CVE-2024-0536
CVE-2024-0537
CVE-2024-0538
CVE-2024-0539
CVE-2024-0540
CVE-2024-2980
CVE-2024-2981
CVE-2024-30587
CVE-2024-4240
CVE-2024-4241
CVE-2024-4242
CVE-2024-4243
CVE-2025-7529
CVE-2025-7544
|
Embedded Devices Web Servers Buffer Overflow (CVE-2024-0536; CVE-2024-0537; CVE-2024-0538; CVE-2024-0539; CVE-2024-0540; CVE-2024-2980; CVE-2024-2981; CVE-2024-30587; CVE-2024-4240; CVE-2024-4241; CVE-2024-4242; CVE-2024-4243; CVE-2025-7529; CVE-2025-7544)
|
|
Critical
|
29 Jan 2026 |
20 Apr 2026 |
CPAI-2025-12709
|
|
CVE-2025-40536
CVE-2025-40552
CVE-2025-40554
|
SolarWinds Web Help Desk Authentication Bypass (CVE-2025-40536; CVE-2025-40552; CVE-2025-40554)
|
|
Critical
|
19 Apr 2026 |
19 Apr 2026 |
CPAI-2026-3224
|
|
CVE-2026-27446
|
Apache ActiveMQ Artemis Authentication Bypass (CVE-2026-27446)
|
|
High
|
19 Apr 2026 |
19 Apr 2026 |
CPAI-2026-3294
|
|
CVE-2026-1687
CVE-2026-1689
CVE-2026-1690
|
Tenda HG10 Command Injection (CVE-2026-1687; CVE-2026-1689; CVE-2026-1690)
|
|
High
|
19 Apr 2026 |
19 Apr 2026 |
CPAI-2026-2644
|
|
CVE-2026-2910
|
Tenda HG9 Buffer Overflow (CVE-2026-2910)
|
|
High
|
19 Apr 2026 |
19 Apr 2026 |
CPAI-2026-2643
|
|
CVE-2026-2017
|
IP-COM W30AP Stack Overflow (CVE-2026-2017)
|
|
High
|
19 Apr 2026 |
19 Apr 2026 |
CPAI-2026-2639
|
|
CVE-2026-2911
|
Tenda FH451 Buffer Overflow (CVE-2026-2911)
|
Feedback