1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 11, 2026, 8:25 AM 17,219 active 1,443 known exploited

Catalog summary

17,219

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 11, 2026, 8:25 AM 17,219 active 1,443 known exploited

Catalog summary

17,219

Active CVEs

8,700

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 7,451–7,500 of 17,219 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-55639Medium
    CISA ADP Vulnrichment
    CVSS 6.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 30, 2026View HOL analysis
  2. CVE-2025-61018High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  3. CVE-2025-61019High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  4. CVE-2025-61020High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  5. CVE-2025-61021High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  6. CVE-2025-61022High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  7. CVE-2025-61023High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  8. CVE-2025-61024High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  9. CVE-2025-61025High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  10. CVE-2025-61027High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  11. CVE-2025-61028High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  12. CVE-2025-61029High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  13. CVE-2026-39253High
    CISA ADP Vulnrichment
    CVSS 8.1
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  14. CVE-2026-10658High
    Out-of-bounds access in Bluetooth ISO receive (`bt_iso_recv`) due to missing SDU-header length validation
    CVSS 7.1
    zephyrproject/zephyrgeneric
    PublishedJun 22, 2026First seen at HOL Jun 23, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  15. CVE-2026-10651High
    Out-of-bounds read in Bluetooth Classic SDP attribute parsing (`bt_sdp_parse_attribute`)
    CVSS 7.1
    zephyrproject/zephyrgeneric
    PublishedJun 22, 2026First seen at HOL Jun 23, 2026Updated Jul 17, 2026 Fix availableView HOL analysis
  16. CVE-2026-10645Medium
    Out-of-bounds read in Zephyr ext2 directory entry traversal from a crafted filesystem image
    CVSS 4.9
    zephyrproject/zephyrgeneric
    PublishedJun 22, 2026First seen at HOL Jun 23, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  17. CVE-2026-48067Medium
    Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields
    CVSS 6.5
    filamentphp/filamentgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 23, 2026View HOL analysis
  18. CVE-2026-44889Medium
    WebOb: Location header normalization during redirect leads to open redirect
    CVSS 6.1
    Pylons/webob, webobgeneric · pypi
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 27, 2026 Fix availableView HOL analysis
  19. CVE-2026-39904Medium
    Gophish 0.12.1 Denial of Service via Office Document Upload
    CVSS 6.5
    github.com/gophish/gophish, gophish/gophishgeneric · go
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Aug 6, 2026View HOL analysis
  20. CVE-2026-10852Medium
    Websphere Application Server is Affected By a Denial of Service
    CVSS 5.9
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 9, 2026View HOL analysis
  21. CVE-2026-44271High
    CISA ADP Vulnrichment
    CVSS 8.1
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  22. CVE-2026-44272High
    CISA ADP Vulnrichment
    CVSS 8.8
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  23. CVE-2026-44273Medium
    CISA ADP Vulnrichment
    CVSS 6.0
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  24. CVE-2026-44274High
    CISA ADP Vulnrichment
    CVSS 7.8
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  25. CVE-2026-11834High
    Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers
    CVSS 8.7
    TP Link Systems Inc./Archer MR402 v1, TP-Link Systems Inc./Archer C20 v5 +5generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  26. CVE-2026-10789Critical
    MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop
    CVSS 9.6
    Autodesk/Fusiongeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 24, 2026 Fix availableView HOL analysis
  27. CVE-2026-42127High
    Pre-authentication denial of service in the public dashboard query endpoint
    CVSS 7.5
    Grafana/Grafana Enterprise, Grafana/Grafana OSSgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Aug 11, 2026View HOL analysis
  28. CVE-2026-12249Critical
    Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment
    CVSS 9.0
    Affected software not mappedEcosystem not listed
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  29. CVE-2026-11994Medium
    Akaunting 3.1.21 - Authenticated stored XSS in report description rendering
    CVSS 4.8
    Akaunting/Akauntinggeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  30. CVE-2026-41049High
    Caching of Authentication allows Authentication Bypass between users in qSnapper
    CVSS 8.4
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  31. CVE-2026-41048High
    Caching of Authentication allows Authentication Bypass in qSnapper
    CVSS 8.4
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 7, 2026 Fix availableView HOL analysis
  32. CVE-2026-11943Medium
    Akaunting 3.1.21 - Authenticated stored XSS in document timeline
    CVSS 4.8
    Akaunting/Akauntinggeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  33. CVE-2026-41047Medium
    Information leak via “diff” methods in qSnapper
    CVSS 6.9
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 7, 2026 Fix availableView HOL analysis
  34. CVE-2026-12479Medium
    Path Traversal in keras-team/keras
    CVSS 6.1
    keras, keras-team/keras-team/kerasgeneric · pip · pypi
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Aug 10, 2026 Fix availableView HOL analysis
  35. CVE-2026-41046High
    path traversal via `config` parameter in qSnapper
    CVSS 7.3
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 28, 2026 Fix availableView HOL analysis
  36. CVE-2026-11942Medium
    Akaunting 3.1.21 - Stored XSS in delete confirmation modal
    CVSS 4.8
    Akaunting/Akauntinggeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  37. CVE-2026-41045High
    Weak polkit authentication check in qSnapper
    CVSS 8.1
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 28, 2026 Fix availableView HOL analysis
  38. CVE-2026-10845High
    IBM WebSphere Application Server is affected by an authentication bypass vulnerability
    CVSS 7.3
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 23, 2026View HOL analysis
  39. CVE-2024-51454Medium
    IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed
    CVSS 6.5
    IBM/Engineering Workflow Managementgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  40. CVE-2023-33854Medium
    Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
    CVSS 5.3
    IBM/Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Datageneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
  41. CVE-2026-9072High
    WebSphere Application Server Remote Code Execution
    CVSS 8.1
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 9, 2026View HOL analysis
  42. CVE-2026-8858High
    WebSphere Application Server Remote Code Execution
    CVSS 7.5
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 9, 2026View HOL analysis
  43. CVE-2026-11372Medium
    IBM TRIRIGA Cross-Site Scripting Vulnerability
    CVSS 5.4
    IBM/TRIRIGA Application Platformgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
  44. CVE-2026-12549Medium
    Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver
    CVSS 4.8
    Affected software not mappedEcosystem not listed
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 8, 2026View HOL analysis
  45. CVE-2026-12725Medium
    Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies
    CVSS 5.9
    Affected software not mappedEcosystem not listed
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 8, 2026View HOL analysis
  46. CVE-2026-12628Critical
    Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system
    CVSS 9.1
    IBM/Storage Protect Client, IBM/Storage Protect Snapshot For Windowsgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  47. CVE-2026-10561Critical
    Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection
    CVSS 10.0
    IBM/Langflow OSSgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  48. CVE-2026-28381Critical
    Local File Read/Write to Potential Privilege Escalation via Snowflake GET/PUT
    CVSS 9.6
    Grafana/Snowflake Datasourcegeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
  49. CVE-2025-33128Medium
    IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed
    CVSS 5.4
    IBM/Engineering Workflow Managementgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  50. CVE-2025-2669Medium
    Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
    CVSS 6.0
    IBM/Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Datageneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
Page 150 of 345
Previous148149150151152Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,700

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 7,451–7,500 of 17,219 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-55639Medium
    CISA ADP Vulnrichment
    CVSS 6.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 30, 2026View HOL analysis
  2. CVE-2025-61018High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  3. CVE-2025-61019High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  4. CVE-2025-61020High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  5. CVE-2025-61021High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  6. CVE-2025-61022High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  7. CVE-2025-61023High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  8. CVE-2025-61024High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  9. CVE-2025-61025High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  10. CVE-2025-61027High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  11. CVE-2025-61028High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jul 15, 2026View HOL analysis
  12. CVE-2025-61029High
    CISA ADP Vulnrichment
    CVSS 7.5
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 23, 2026View HOL analysis
  13. CVE-2026-39253High
    CISA ADP Vulnrichment
    CVSS 8.1
    n/a/n/ageneric
    PublishedJun 23, 2026First seen at HOL Jun 23, 2026Updated Jun 25, 2026View HOL analysis
  14. CVE-2026-10658High
    Out-of-bounds access in Bluetooth ISO receive (`bt_iso_recv`) due to missing SDU-header length validation
    CVSS 7.1
    zephyrproject/zephyrgeneric
    PublishedJun 22, 2026First seen at HOL Jun 23, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  15. CVE-2026-10651High
    Out-of-bounds read in Bluetooth Classic SDP attribute parsing (`bt_sdp_parse_attribute`)
    CVSS 7.1
    zephyrproject/zephyrgeneric
    PublishedJun 22, 2026First seen at HOL Jun 23, 2026Updated Jul 17, 2026 Fix availableView HOL analysis
  16. CVE-2026-10645Medium
    Out-of-bounds read in Zephyr ext2 directory entry traversal from a crafted filesystem image
    CVSS 4.9
    zephyrproject/zephyrgeneric
    PublishedJun 22, 2026First seen at HOL Jun 23, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  17. CVE-2026-48067Medium
    Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields
    CVSS 6.5
    filamentphp/filamentgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 23, 2026View HOL analysis
  18. CVE-2026-44889Medium
    WebOb: Location header normalization during redirect leads to open redirect
    CVSS 6.1
    Pylons/webob, webobgeneric · pypi
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 27, 2026 Fix availableView HOL analysis
  19. CVE-2026-39904Medium
    Gophish 0.12.1 Denial of Service via Office Document Upload
    CVSS 6.5
    github.com/gophish/gophish, gophish/gophishgeneric · go
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Aug 6, 2026View HOL analysis
  20. CVE-2026-10852Medium
    Websphere Application Server is Affected By a Denial of Service
    CVSS 5.9
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 9, 2026View HOL analysis
  21. CVE-2026-44271High
    CISA ADP Vulnrichment
    CVSS 8.1
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  22. CVE-2026-44272High
    CISA ADP Vulnrichment
    CVSS 8.8
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  23. CVE-2026-44273Medium
    CISA ADP Vulnrichment
    CVSS 6.0
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  24. CVE-2026-44274High
    CISA ADP Vulnrichment
    CVSS 7.8
    Dell/Wyse Management Suite (WMS)generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  25. CVE-2026-11834High
    Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers
    CVSS 8.7
    TP Link Systems Inc./Archer MR402 v1, TP-Link Systems Inc./Archer C20 v5 +5generic
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  26. CVE-2026-10789Critical
    MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop
    CVSS 9.6
    Autodesk/Fusiongeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 24, 2026 Fix availableView HOL analysis
  27. CVE-2026-42127High
    Pre-authentication denial of service in the public dashboard query endpoint
    CVSS 7.5
    Grafana/Grafana Enterprise, Grafana/Grafana OSSgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Aug 11, 2026View HOL analysis
  28. CVE-2026-12249Critical
    Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment
    CVSS 9.0
    Affected software not mappedEcosystem not listed
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  29. CVE-2026-11994Medium
    Akaunting 3.1.21 - Authenticated stored XSS in report description rendering
    CVSS 4.8
    Akaunting/Akauntinggeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  30. CVE-2026-41049High
    Caching of Authentication allows Authentication Bypass between users in qSnapper
    CVSS 8.4
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  31. CVE-2026-41048High
    Caching of Authentication allows Authentication Bypass in qSnapper
    CVSS 8.4
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 7, 2026 Fix availableView HOL analysis
  32. CVE-2026-11943Medium
    Akaunting 3.1.21 - Authenticated stored XSS in document timeline
    CVSS 4.8
    Akaunting/Akauntinggeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  33. CVE-2026-41047Medium
    Information leak via “diff” methods in qSnapper
    CVSS 6.9
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 7, 2026 Fix availableView HOL analysis
  34. CVE-2026-12479Medium
    Path Traversal in keras-team/keras
    CVSS 6.1
    keras, keras-team/keras-team/kerasgeneric · pip · pypi
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Aug 10, 2026 Fix availableView HOL analysis
  35. CVE-2026-41046High
    path traversal via `config` parameter in qSnapper
    CVSS 7.3
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 28, 2026 Fix availableView HOL analysis
  36. CVE-2026-11942Medium
    Akaunting 3.1.21 - Stored XSS in delete confirmation modal
    CVSS 4.8
    Akaunting/Akauntinggeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 22, 2026View HOL analysis
  37. CVE-2026-41045High
    Weak polkit authentication check in qSnapper
    CVSS 8.1
    presire/qSnappergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 28, 2026 Fix availableView HOL analysis
  38. CVE-2026-10845High
    IBM WebSphere Application Server is affected by an authentication bypass vulnerability
    CVSS 7.3
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 23, 2026View HOL analysis
  39. CVE-2024-51454Medium
    IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed
    CVSS 6.5
    IBM/Engineering Workflow Managementgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  40. CVE-2023-33854Medium
    Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
    CVSS 5.3
    IBM/Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Datageneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
  41. CVE-2026-9072High
    WebSphere Application Server Remote Code Execution
    CVSS 8.1
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 9, 2026View HOL analysis
  42. CVE-2026-8858High
    WebSphere Application Server Remote Code Execution
    CVSS 7.5
    IBM/WebSphere Application Servergeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 9, 2026View HOL analysis
  43. CVE-2026-11372Medium
    IBM TRIRIGA Cross-Site Scripting Vulnerability
    CVSS 5.4
    IBM/TRIRIGA Application Platformgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
  44. CVE-2026-12549Medium
    Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver
    CVSS 4.8
    Affected software not mappedEcosystem not listed
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 8, 2026View HOL analysis
  45. CVE-2026-12725Medium
    Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies
    CVSS 5.9
    Affected software not mappedEcosystem not listed
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jul 8, 2026View HOL analysis
  46. CVE-2026-12628Critical
    Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system
    CVSS 9.1
    IBM/Storage Protect Client, IBM/Storage Protect Snapshot For Windowsgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  47. CVE-2026-10561Critical
    Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection
    CVSS 10.0
    IBM/Langflow OSSgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  48. CVE-2026-28381Critical
    Local File Read/Write to Potential Privilege Escalation via Snowflake GET/PUT
    CVSS 9.6
    Grafana/Snowflake Datasourcegeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
  49. CVE-2025-33128Medium
    IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed
    CVSS 5.4
    IBM/Engineering Workflow Managementgeneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 26, 2026View HOL analysis
  50. CVE-2025-2669Medium
    Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
    CVSS 6.0
    IBM/Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Datageneric
    PublishedJun 22, 2026First seen at HOL Jun 22, 2026Updated Jun 30, 2026View HOL analysis
Page 150 of 345
Previous148149150151152Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard