1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 8, 2026, 7:50 PM 16,269 active 1,443 known exploited

Catalog summary

16,269

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 8, 2026, 7:50 PM 16,269 active 1,443 known exploited

Catalog summary

16,269

Active CVEs

8,418

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 1,301–1,350 of 16,269 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-25289Critical
    Stack-based Buffer Overflow in WLAN Firmware
    CVSS 9.6
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  2. CVE-2026-25288High
    Buffer Over-read in WLAN Firmware
    CVSS 7.4
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  3. CVE-2026-24084High
    Insecure Security Identifier Mechanism in Multi-Mode Call Processor
    CVSS 7.5
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  4. CVE-2026-24083High
    Untrusted Pointer Dereference in Automotive Security
    CVSS 7.8
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  5. CVE-2026-24080High
    Buffer Copy Without Checking Size of Input in Biometrics
    CVSS 7.8
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  6. CVE-2026-24079High
    Missing Authentication for Critical Function in Data Modem
    CVSS 8.1
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  7. CVE-2026-24078Medium
    Exposure of Private Personal Information to an Unauthorized Actor in Data Modem
    CVSS 6.5
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  8. CVE-2026-24077Medium
    Integer Underflow (Wrap or Wraparound) in WLAN Host
    CVSS 6.5
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  9. CVE-2026-24076Medium
    Buffer Copy Without Checking Size of Input in Bluetooth HOST
    CVSS 6.7
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  10. CVE-2026-21366High
    Integer Overflow or Wraparound in Data Network Stack & Connectivity
    CVSS 7.8
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  11. CVE-2026-18773Medium
    NousResearch hermes-agent Quick run.py _check_slash_access authorization
    CVSS 6.3
    NousResearch/hermes-agentgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  12. CVE-2026-18801Critical
    Stored Clickhouse SQL Injection Through Customer Usage Attribution
    CVSS 9.3
    openmeter/openmetergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  13. CVE-2026-18770High
    vibesurf-ai VibeSurf Python Validation code code injection
    CVSS 7.3
    vibesurf-ai/VibeSurfgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  14. CVE-2026-68494High
    jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)
    CVSS 8.7
    FasterXML/jackson-coregeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2026-11368High
    Use-after-free in Bluetooth host ATT TX completion on disconnect mid-transfer
    CVSS 7.1
    zephyrproject/zephyrgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  16. CVE-2026-18401Medium
    jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of service
    CVSS 6.9
    FasterXML/jackson-coregeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  17. CVE-2026-69250High
    Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
    CVSS 8.5
    FlowiseAI/Flowise, flowisegeneric · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  18. CVE-2026-18766Medium
    chetans9 core-php-admin-panel customers.php sql injection
    CVSS 6.3
    chetans9/core-php-admin-panelgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  19. CVE-2026-67200High
    Perspective 5.0.0 Path Traversal via cwd_static_file_handler
    CVSS 7.5
    perspective-dev/perspectivegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  20. CVE-2026-67196Medium
    Perspective 5.0.0 XSS via Debug Plugin innerHTML Interpolation
    CVSS 5.4
    perspective-dev/perspectivegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  21. CVE-2026-18650High
    Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS
    CVSS 8.8
    HAVELSAN Inc./Liman MYSgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  22. CVE-2026-61515Critical
    Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
    CVSS 9.8
    Puwell Technology Inc./IP Camerageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  23. CVE-2026-70368Medium
    Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message
    CVSS 6.5
    Mobi-Com Polska Sp. z o.o./stunnelgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  24. CVE-2026-70367Medium
    Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services
    CVSS 5.4
    Mobi-Com Polska Sp. z o.o./stunnelgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  25. CVE-2026-14337Medium
    Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
    CVSS 4.6
    Pegasystems/Pega Infinitygeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  26. CVE-2026-17070High
    Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS
    CVSS 8.8
    HAVELSAN Inc./Liman MYSgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  27. CVE-2026-70373Medium
    Koha: SQL Injection in reports/issues_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2026-70372Medium
    Koha: SQL Injection in reports/bor_issues_top.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2026-70371Medium
    Koha: SQL Injection in reports/issues_avg_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2026-70370Medium
    Koha: SQL Injection in reports/catalogue_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2026-70369Medium
    Koha: SQL Injection in reports/acquisitions_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  32. CVE-2026-10710High
    FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK
    CVSS 7.8
    Autodesk/FBX SDKgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  33. CVE-2026-10709High
    FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK
    CVSS 7.8
    Autodesk/FBX SDKgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  34. CVE-2026-18806High
    Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer
    CVSS 7.1
    TÜBİTAK BİLGEM Software Technologies Research Institute/pardus-image-writergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  35. CVE-2026-18809Medium
    Information disclosure in Firefox for Android and Firefox Focus for Android
    CVSS 6.5
    Affected software not mappedEcosystem not listed
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  36. CVE-2026-10050High
    Digest authentication lossy encoding
    CVSS 8.7
    Eclipse Foundation/Eclipse Jetty, Eclipse Foundation/Eclipse Jetty - EE8 +4generic · maven
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 8, 2026 Fix availableView HOL analysis
  37. CVE-2026-14202Medium
    Username Enumeration via Differential Login Responses in Bilin Software's HUMANIST Digital Human Resources
    CVSS 5.3
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  38. CVE-2026-14465Medium
    Session Fixation in Bilin Software's HUMANIST Digital Human Resources
    CVSS 6.5
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  39. CVE-2026-14192Medium
    Stored XSS in Bilin Software's HUMANIST Digital Human Resources
    CVSS 5.4
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  40. CVE-2026-14838High
    Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources
    CVSS 7.4
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  41. CVE-2026-14804Critical
    Hardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources
    CVSS 9.1
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  42. CVE-2026-14219Medium
    URL Redirection in Bilin Software's HUMANIST Digital Human Resources
    CVSS 5.4
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  43. CVE-2026-14194Medium
    Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources
    CVSS 6.5
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  44. CVE-2026-14175Critical
    Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources
    CVSS 9.8
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  45. CVE-2026-18772Medium
    CISA ADP Vulnrichment
    CVSS 5.5
    Affected software not mappedEcosystem not listed
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  46. CVE-2026-15721Critical
    Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources
    CVSS 9.8
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  47. CVE-2026-18759High
    An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
    CVSS 8.5
    ASUSTOR Inc./ABP, ASUSTOR Inc./AESgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  48. CVE-2026-18755High
    GV-ASManager DLL hijacking vulnerability
    CVSS 7.3
    GeoVision Inc./GV-ASManagergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  49. CVE-2026-18754Critical
    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)
    CVSS 9.1
    GeoVision Inc./GV-AS1620 (GV-Cloud)generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  50. CVE-2026-18753Critical
    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)
    CVSS 9.1
    GeoVision Inc./GV-AS1620 (AS-Manager)generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
Page 27 of 326
Previous2526272829Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,418

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 1,301–1,350 of 16,269 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-25289Critical
    Stack-based Buffer Overflow in WLAN Firmware
    CVSS 9.6
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  2. CVE-2026-25288High
    Buffer Over-read in WLAN Firmware
    CVSS 7.4
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  3. CVE-2026-24084High
    Insecure Security Identifier Mechanism in Multi-Mode Call Processor
    CVSS 7.5
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  4. CVE-2026-24083High
    Untrusted Pointer Dereference in Automotive Security
    CVSS 7.8
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  5. CVE-2026-24080High
    Buffer Copy Without Checking Size of Input in Biometrics
    CVSS 7.8
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  6. CVE-2026-24079High
    Missing Authentication for Critical Function in Data Modem
    CVSS 8.1
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  7. CVE-2026-24078Medium
    Exposure of Private Personal Information to an Unauthorized Actor in Data Modem
    CVSS 6.5
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  8. CVE-2026-24077Medium
    Integer Underflow (Wrap or Wraparound) in WLAN Host
    CVSS 6.5
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  9. CVE-2026-24076Medium
    Buffer Copy Without Checking Size of Input in Bluetooth HOST
    CVSS 6.7
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  10. CVE-2026-21366High
    Integer Overflow or Wraparound in Data Network Stack & Connectivity
    CVSS 7.8
    Qualcomm, Inc./Snapdragongeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026View HOL analysis
  11. CVE-2026-18773Medium
    NousResearch hermes-agent Quick run.py _check_slash_access authorization
    CVSS 6.3
    NousResearch/hermes-agentgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  12. CVE-2026-18801Critical
    Stored Clickhouse SQL Injection Through Customer Usage Attribution
    CVSS 9.3
    openmeter/openmetergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  13. CVE-2026-18770High
    vibesurf-ai VibeSurf Python Validation code code injection
    CVSS 7.3
    vibesurf-ai/VibeSurfgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  14. CVE-2026-68494High
    jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)
    CVSS 8.7
    FasterXML/jackson-coregeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2026-11368High
    Use-after-free in Bluetooth host ATT TX completion on disconnect mid-transfer
    CVSS 7.1
    zephyrproject/zephyrgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  16. CVE-2026-18401Medium
    jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of service
    CVSS 6.9
    FasterXML/jackson-coregeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  17. CVE-2026-69250High
    Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
    CVSS 8.5
    FlowiseAI/Flowise, flowisegeneric · npm
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  18. CVE-2026-18766Medium
    chetans9 core-php-admin-panel customers.php sql injection
    CVSS 6.3
    chetans9/core-php-admin-panelgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  19. CVE-2026-67200High
    Perspective 5.0.0 Path Traversal via cwd_static_file_handler
    CVSS 7.5
    perspective-dev/perspectivegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  20. CVE-2026-67196Medium
    Perspective 5.0.0 XSS via Debug Plugin innerHTML Interpolation
    CVSS 5.4
    perspective-dev/perspectivegeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  21. CVE-2026-18650High
    Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS
    CVSS 8.8
    HAVELSAN Inc./Liman MYSgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  22. CVE-2026-61515Critical
    Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
    CVSS 9.8
    Puwell Technology Inc./IP Camerageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026View HOL analysis
  23. CVE-2026-70368Medium
    Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message
    CVSS 6.5
    Mobi-Com Polska Sp. z o.o./stunnelgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  24. CVE-2026-70367Medium
    Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services
    CVSS 5.4
    Mobi-Com Polska Sp. z o.o./stunnelgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  25. CVE-2026-14337Medium
    Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
    CVSS 4.6
    Pegasystems/Pega Infinitygeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  26. CVE-2026-17070High
    Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS
    CVSS 8.8
    HAVELSAN Inc./Liman MYSgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  27. CVE-2026-70373Medium
    Koha: SQL Injection in reports/issues_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2026-70372Medium
    Koha: SQL Injection in reports/bor_issues_top.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2026-70371Medium
    Koha: SQL Injection in reports/issues_avg_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2026-70370Medium
    Koha: SQL Injection in reports/catalogue_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2026-70369Medium
    Koha: SQL Injection in reports/acquisitions_stats.pl
    CVSS 6.5
    Koha Community/Kohageneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  32. CVE-2026-10710High
    FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK
    CVSS 7.8
    Autodesk/FBX SDKgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  33. CVE-2026-10709High
    FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK
    CVSS 7.8
    Autodesk/FBX SDKgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  34. CVE-2026-18806High
    Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer
    CVSS 7.1
    TÜBİTAK BİLGEM Software Technologies Research Institute/pardus-image-writergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  35. CVE-2026-18809Medium
    Information disclosure in Firefox for Android and Firefox Focus for Android
    CVSS 6.5
    Affected software not mappedEcosystem not listed
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  36. CVE-2026-10050High
    Digest authentication lossy encoding
    CVSS 8.7
    Eclipse Foundation/Eclipse Jetty, Eclipse Foundation/Eclipse Jetty - EE8 +4generic · maven
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 8, 2026 Fix availableView HOL analysis
  37. CVE-2026-14202Medium
    Username Enumeration via Differential Login Responses in Bilin Software's HUMANIST Digital Human Resources
    CVSS 5.3
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  38. CVE-2026-14465Medium
    Session Fixation in Bilin Software's HUMANIST Digital Human Resources
    CVSS 6.5
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  39. CVE-2026-14192Medium
    Stored XSS in Bilin Software's HUMANIST Digital Human Resources
    CVSS 5.4
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  40. CVE-2026-14838High
    Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources
    CVSS 7.4
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  41. CVE-2026-14804Critical
    Hardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources
    CVSS 9.1
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  42. CVE-2026-14219Medium
    URL Redirection in Bilin Software's HUMANIST Digital Human Resources
    CVSS 5.4
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  43. CVE-2026-14194Medium
    Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources
    CVSS 6.5
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  44. CVE-2026-14175Critical
    Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources
    CVSS 9.8
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  45. CVE-2026-18772Medium
    CISA ADP Vulnrichment
    CVSS 5.5
    Affected software not mappedEcosystem not listed
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  46. CVE-2026-15721Critical
    Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources
    CVSS 9.8
    Bilin Software and Informatics Consultancy Inc./HUMANIST Digital Human Resourcesgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026 Fix availableView HOL analysis
  47. CVE-2026-18759High
    An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
    CVSS 8.5
    ASUSTOR Inc./ABP, ASUSTOR Inc./AESgeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  48. CVE-2026-18755High
    GV-ASManager DLL hijacking vulnerability
    CVSS 7.3
    GeoVision Inc./GV-ASManagergeneric
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  49. CVE-2026-18754Critical
    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)
    CVSS 9.1
    GeoVision Inc./GV-AS1620 (GV-Cloud)generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
  50. CVE-2026-18753Critical
    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)
    CVSS 9.1
    GeoVision Inc./GV-AS1620 (AS-Manager)generic
    PublishedAug 4, 2026First seen at HOL Aug 4, 2026Updated Aug 4, 2026View HOL analysis
Page 27 of 326
Previous2526272829Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard