1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 9, 2026, 1:20 PM 16,329 active 1,443 known exploited

Catalog summary

16,329

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 9, 2026, 1:20 PM 16,329 active 1,443 known exploited

Catalog summary

16,329

Active CVEs

8,450

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 3,201–3,250 of 16,329 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-15043Unknown severity
    DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
    Not scoredSource severity not reported
    HMBRAND/DBI::SQL::Nanogeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  2. CVE-2026-14852Medium
    mk_sap_hana: Privilege escalation via crafted sapstartsrv process name
    CVSS 5.2
    Checkmk GmbH/Checkmkgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 29, 2026 Fix availableView HOL analysis
  3. CVE-2026-12478Medium
    Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)
    CVSS 4.8
    Affected software not mappedEcosystem not listed
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  4. CVE-2026-54429High
    CISA ADP Vulnrichment
    CVSS 7.4
    Siemens/SIMATIC S7-PLCSIM Advancedgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  5. CVE-2025-40945Medium
    CISA ADP Vulnrichment
    CVSS 6.7
    Siemens/COMOS V10.4.5, Siemens/COMOS V10.6 +14generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  6. CVE-2024-7708High
    CISA ADP Vulnrichment
    CVSS 7.5
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-servergeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 22, 2026 Fix availableView HOL analysis
  7. CVE-2026-15416High
    Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint
    CVSS 8.9
    argoproj/argo-helmgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  8. CVE-2026-8384Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-utilgeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 24, 2026 Fix availableView HOL analysis
  9. CVE-2026-6790Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-servergeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 24, 2026 Fix availableView HOL analysis
  10. CVE-2026-10051Medium
    CISA ADP Vulnrichment
    CVSS 6.9
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-servergeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 24, 2026 Fix availableView HOL analysis
  11. CVE-2026-15183Critical
    Input Validation Vulnerabilities in Snowflake Spark Connector
    CVSS 9.2
    Snowflake/Snowflake Spark Connectorgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  12. CVE-2026-12606Medium
    CISA ADP Vulnrichment
    CVSS 6.3
    Eclipse Foundation/Eclipse GlassFishgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 27, 2026 Fix availableView HOL analysis
  13. CVE-2026-15075High
    CISA ADP Vulnrichment
    CVSS 8.2
    Eclipse Foundation/Eclipse Vert.xgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  14. CVE-2026-59083Critical
    Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass
    CVSS 9.1
    Apache Software Foundation/Apache Tomcatgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  15. CVE-2026-15076High
    CISA ADP Vulnrichment
    CVSS 8.2
    Eclipse Foundation/Eclipse Vert.xgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  16. CVE-2026-9561High
    CISA ADP Vulnrichment
    CVSS 8.8
    Eclipse Foundation/Eclipse Kurageneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  17. CVE-2026-57898Critical
    CISA ADP Vulnrichment
    CVSS 9.0
    Eclipse Foundation/Eclipse BaSyx - Java Server SDKgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  18. CVE-2025-8412Low
    VMDP: Potential buffer overflow in the RtlQueryRegistryValues function
    CVSS 2.0
    SUSE/Virtual Machine Driver Packgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  19. CVE-2026-13699Medium
    Databroker 0.6.1 PublishValue missing data_point panic
    CVSS 4.3
    Eclipse Foundation/Eclipse KUKSA - Databrokergeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  20. CVE-2026-15678Low
    code-projects Online Job Portal DetailJob.php cross site scripting
    CVSS 3.5
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  21. CVE-2026-15677High
    code-projects Online Job Portal JobSeekerInsert.php unrestricted upload
    CVSS 7.3
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  22. CVE-2026-15676High
    code-projects Online Job Portal DeleteUser.php sql injection
    CVSS 7.3
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  23. CVE-2026-12988Medium
    WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding
    CVSS 6.4
    Unknown/WP 2FAgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  24. CVE-2026-12583High
    Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field
    CVSS 8.1
    Unknown/Newslettersgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  25. CVE-2026-12511High
    AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal
    CVSS 8.1
    Unknown/AI Enginegeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  26. CVE-2026-11567Medium
    SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass
    CVSS 5.9
    Unknown/SureFormsgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  27. CVE-2026-11563Critical
    Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal
    CVSS 9.6
    Unknown/Word Count and Social Sharesgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  28. CVE-2025-15665Medium
    BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
    CVSS 5.4
    Unknown/Ultimate Before After Image Slider & Gallerygeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  29. CVE-2026-15675High
    code-projects Online Job Portal EditUser.php sql injection
    CVSS 7.3
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  30. CVE-2026-15672Medium
    itsourcecode Electronic Judging System add_judges.php sql injection
    CVSS 6.3
    itsourcecode/Electronic Judging Systemgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  31. CVE-2026-15669Medium
    louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection
    CVSS 5.3
    louisho5/picobotgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  32. CVE-2026-12482Medium
    Path Traversal via Symlink Name Validation Bypass in keras-team/keras
    CVSS 6.5
    keras, keras-team/keras-team/kerasgeneric · pip · pypi
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Aug 7, 2026 Fix availableView HOL analysis
  33. CVE-2026-15668Medium
    louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery
    CVSS 6.3
    louisho5/picobotgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  34. CVE-2026-15629Medium
    louisho5 picobot Workspace filesystem.go GetSkill link following
    CVSS 6.3
    louisho5/picobotgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  35. CVE-2026-15628Medium
    zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery
    CVSS 6.3
    zhayujie/chatgpt-on-wechat CowAgentgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  36. CVE-2026-15627Medium
    nextlevelbuilder GoClaw tool.go handleNavigate information disclosure
    CVSS 4.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  37. CVE-2026-15626Medium
    nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal
    CVSS 6.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  38. CVE-2026-15625Medium
    nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist
    CVSS 6.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  39. CVE-2026-15624Medium
    nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery
    CVSS 6.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  40. CVE-2026-11390Medium
    News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets
    CVSS 6.4
    blazethemes/News Kit Addons For Elementorgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  41. CVE-2026-11802Medium
    FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action
    CVSS 5.3
    themelooks/FoodBook Lite – Online Food Ordering Systemgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  42. CVE-2026-15622Medium
    poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization
    CVSS 5.3
    poco-ai/poco-clawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  43. CVE-2026-15621Medium
    mosaxiv clawlet File Tools fs_ops.go edit_file link following
    CVSS 5.3
    mosaxiv/clawletgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  44. CVE-2026-44767Medium
    Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection
    CVSS 6.1
    SAP_SE/@ui5/webcomponents-basegeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  45. CVE-2026-44771Medium
    Missing Authorization check in SAP S/4HANA (Draft operation)
    CVSS 4.3
    SAP_SE/SAP S/4HANA (Draft operation)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  46. CVE-2026-44770Medium
    Missing Authorization check in SAP S/4 HANA (Create Single Payment)
    CVSS 4.3
    SAP_SE/SAP S/4 HANA (Create Single Payment)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  47. CVE-2026-44769Medium
    SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)
    CVSS 5.5
    SAP_SE/SAP S/4HANA Project Management (PPM-PRO)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  48. CVE-2026-44768Medium
    Security misconfiguration in SAP CRM (WebClient UI)
    CVSS 4.1
    SAP_SE/SAP CRM (WebClient UI)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  49. CVE-2026-44761Critical
    Insecure Sample Credentials in SAP Commerce Cloud
    CVSS 9.1
    SAP_SE/SAP Commerce Cloudgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  50. CVE-2026-44760Medium
    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)
    CVSS 4.7
    SAP_SE/SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
Page 65 of 327
Previous6364656667Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,450

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 3,201–3,250 of 16,329 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-15043Unknown severity
    DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
    Not scoredSource severity not reported
    HMBRAND/DBI::SQL::Nanogeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  2. CVE-2026-14852Medium
    mk_sap_hana: Privilege escalation via crafted sapstartsrv process name
    CVSS 5.2
    Checkmk GmbH/Checkmkgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 29, 2026 Fix availableView HOL analysis
  3. CVE-2026-12478Medium
    Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)
    CVSS 4.8
    Affected software not mappedEcosystem not listed
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  4. CVE-2026-54429High
    CISA ADP Vulnrichment
    CVSS 7.4
    Siemens/SIMATIC S7-PLCSIM Advancedgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  5. CVE-2025-40945Medium
    CISA ADP Vulnrichment
    CVSS 6.7
    Siemens/COMOS V10.4.5, Siemens/COMOS V10.6 +14generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  6. CVE-2024-7708High
    CISA ADP Vulnrichment
    CVSS 7.5
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-servergeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 22, 2026 Fix availableView HOL analysis
  7. CVE-2026-15416High
    Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint
    CVSS 8.9
    argoproj/argo-helmgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  8. CVE-2026-8384Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-utilgeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 24, 2026 Fix availableView HOL analysis
  9. CVE-2026-6790Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-servergeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 24, 2026 Fix availableView HOL analysis
  10. CVE-2026-10051Medium
    CISA ADP Vulnrichment
    CVSS 6.9
    Eclipse Foundation/Eclipse Jetty, org.eclipse.jetty:jetty-servergeneric · maven
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 24, 2026 Fix availableView HOL analysis
  11. CVE-2026-15183Critical
    Input Validation Vulnerabilities in Snowflake Spark Connector
    CVSS 9.2
    Snowflake/Snowflake Spark Connectorgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  12. CVE-2026-12606Medium
    CISA ADP Vulnrichment
    CVSS 6.3
    Eclipse Foundation/Eclipse GlassFishgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 27, 2026 Fix availableView HOL analysis
  13. CVE-2026-15075High
    CISA ADP Vulnrichment
    CVSS 8.2
    Eclipse Foundation/Eclipse Vert.xgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  14. CVE-2026-59083Critical
    Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass
    CVSS 9.1
    Apache Software Foundation/Apache Tomcatgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  15. CVE-2026-15076High
    CISA ADP Vulnrichment
    CVSS 8.2
    Eclipse Foundation/Eclipse Vert.xgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  16. CVE-2026-9561High
    CISA ADP Vulnrichment
    CVSS 8.8
    Eclipse Foundation/Eclipse Kurageneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  17. CVE-2026-57898Critical
    CISA ADP Vulnrichment
    CVSS 9.0
    Eclipse Foundation/Eclipse BaSyx - Java Server SDKgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  18. CVE-2025-8412Low
    VMDP: Potential buffer overflow in the RtlQueryRegistryValues function
    CVSS 2.0
    SUSE/Virtual Machine Driver Packgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  19. CVE-2026-13699Medium
    Databroker 0.6.1 PublishValue missing data_point panic
    CVSS 4.3
    Eclipse Foundation/Eclipse KUKSA - Databrokergeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  20. CVE-2026-15678Low
    code-projects Online Job Portal DetailJob.php cross site scripting
    CVSS 3.5
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  21. CVE-2026-15677High
    code-projects Online Job Portal JobSeekerInsert.php unrestricted upload
    CVSS 7.3
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  22. CVE-2026-15676High
    code-projects Online Job Portal DeleteUser.php sql injection
    CVSS 7.3
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  23. CVE-2026-12988Medium
    WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding
    CVSS 6.4
    Unknown/WP 2FAgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  24. CVE-2026-12583High
    Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field
    CVSS 8.1
    Unknown/Newslettersgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  25. CVE-2026-12511High
    AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal
    CVSS 8.1
    Unknown/AI Enginegeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  26. CVE-2026-11567Medium
    SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass
    CVSS 5.9
    Unknown/SureFormsgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  27. CVE-2026-11563Critical
    Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal
    CVSS 9.6
    Unknown/Word Count and Social Sharesgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  28. CVE-2025-15665Medium
    BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
    CVSS 5.4
    Unknown/Ultimate Before After Image Slider & Gallerygeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  29. CVE-2026-15675High
    code-projects Online Job Portal EditUser.php sql injection
    CVSS 7.3
    code-projects/Online Job Portalgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  30. CVE-2026-15672Medium
    itsourcecode Electronic Judging System add_judges.php sql injection
    CVSS 6.3
    itsourcecode/Electronic Judging Systemgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  31. CVE-2026-15669Medium
    louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection
    CVSS 5.3
    louisho5/picobotgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  32. CVE-2026-12482Medium
    Path Traversal via Symlink Name Validation Bypass in keras-team/keras
    CVSS 6.5
    keras, keras-team/keras-team/kerasgeneric · pip · pypi
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Aug 7, 2026 Fix availableView HOL analysis
  33. CVE-2026-15668Medium
    louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery
    CVSS 6.3
    louisho5/picobotgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  34. CVE-2026-15629Medium
    louisho5 picobot Workspace filesystem.go GetSkill link following
    CVSS 6.3
    louisho5/picobotgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  35. CVE-2026-15628Medium
    zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery
    CVSS 6.3
    zhayujie/chatgpt-on-wechat CowAgentgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  36. CVE-2026-15627Medium
    nextlevelbuilder GoClaw tool.go handleNavigate information disclosure
    CVSS 4.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  37. CVE-2026-15626Medium
    nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal
    CVSS 6.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  38. CVE-2026-15625Medium
    nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist
    CVSS 6.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  39. CVE-2026-15624Medium
    nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery
    CVSS 6.3
    nextlevelbuilder/GoClawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  40. CVE-2026-11390Medium
    News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets
    CVSS 6.4
    blazethemes/News Kit Addons For Elementorgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  41. CVE-2026-11802Medium
    FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action
    CVSS 5.3
    themelooks/FoodBook Lite – Online Food Ordering Systemgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  42. CVE-2026-15622Medium
    poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization
    CVSS 5.3
    poco-ai/poco-clawgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  43. CVE-2026-15621Medium
    mosaxiv clawlet File Tools fs_ops.go edit_file link following
    CVSS 5.3
    mosaxiv/clawletgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  44. CVE-2026-44767Medium
    Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection
    CVSS 6.1
    SAP_SE/@ui5/webcomponents-basegeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  45. CVE-2026-44771Medium
    Missing Authorization check in SAP S/4HANA (Draft operation)
    CVSS 4.3
    SAP_SE/SAP S/4HANA (Draft operation)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  46. CVE-2026-44770Medium
    Missing Authorization check in SAP S/4 HANA (Create Single Payment)
    CVSS 4.3
    SAP_SE/SAP S/4 HANA (Create Single Payment)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  47. CVE-2026-44769Medium
    SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)
    CVSS 5.5
    SAP_SE/SAP S/4HANA Project Management (PPM-PRO)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  48. CVE-2026-44768Medium
    Security misconfiguration in SAP CRM (WebClient UI)
    CVSS 4.1
    SAP_SE/SAP CRM (WebClient UI)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
  49. CVE-2026-44761Critical
    Insecure Sample Credentials in SAP Commerce Cloud
    CVSS 9.1
    SAP_SE/SAP Commerce Cloudgeneric
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 15, 2026View HOL analysis
  50. CVE-2026-44760Medium
    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)
    CVSS 4.7
    SAP_SE/SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)generic
    PublishedJul 14, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026View HOL analysis
Page 65 of 327
Previous6364656667Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard