1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 9, 2026, 5:15 PM 16,339 active 1,443 known exploited

Catalog summary

16,339

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 9, 2026, 5:15 PM 16,339 active 1,443 known exploited

Catalog summary

16,339

Active CVEs

8,456

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 3,551–3,600 of 16,339 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-56281Low
    Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint
    CVSS 3.8
    Capgo/Capgogeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  2. CVE-2026-56271Critical
    Flowise - Weak Default JWT Secrets in Authentication Middleware
    CVSS 9.8
    Flowise/Flowisegeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  3. CVE-2026-56252Medium
    Capgo - Scope Isolation Failure in Webhook Test Endpoint
    CVSS 5.4
    Capgo/Capgogeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  4. CVE-2026-56238High
    Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint
    CVSS 7.5
    Capgo/Capgogeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  5. CVE-2026-15500Medium
    AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery
    CVSS 6.3
    AstrBotDevs/AstrBotgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026View HOL analysis
  6. CVE-2026-15499Medium
    AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskTool.call improper authorization
    CVSS 6.3
    AstrBotDevs/AstrBotgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026View HOL analysis
  7. CVE-2026-15498High
    sergomanov SmartHomeAdatum Login users.php sql injection
    CVSS 7.3
    sergomanov/SmartHomeAdatumgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026View HOL analysis
  8. CVE-2026-15497High
    SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection
    CVSS 7.3
    SonicCloudOrg/sonic-agentgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 14, 2026View HOL analysis
  9. CVE-2026-15496Medium
    SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection
    CVSS 6.3
    SonicCloudOrg/sonic-agentgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  10. CVE-2026-15495Medium
    SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection
    CVSS 6.3
    SonicCloudOrg/sonic-agentgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 15, 2026View HOL analysis
  11. CVE-2026-15494Medium
    AMTT Hotel Broadband Operation System switch_status.php sql injection
    CVSS 4.7
    AMTT/Hotel Broadband Operation Systemgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  12. CVE-2026-15493Low
    Akpali9 Attendance-Management-System absent.php cross site scripting
    CVSS 3.5
    Akpali9/Attendance-Management-Systemgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  13. CVE-2026-15492Medium
    igweze wizgrade studentConductManager.php cross site scripting
    CVSS 4.3
    igweze/wizgradegeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  14. CVE-2026-15491High
    RafyMrX TOKO-ONLINE-ROTI missing authentication
    CVSS 7.3
    RafyMrX/TOKO-ONLINE-ROTIgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  15. CVE-2026-15490High
    RafyMrX TOKO-ONLINE-ROTI add.php sql injection
    CVSS 7.3
    RafyMrX/TOKO-ONLINE-ROTIgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  16. CVE-2026-15489High
    RafyMrX TOKO-ONLINE-ROTI login.php sql injection
    CVSS 7.3
    RafyMrX/TOKO-ONLINE-ROTIgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 15, 2026View HOL analysis
  17. CVE-2026-15488High
    hcr707305003 shiroiAdmin FileController.php upload unrestricted upload
    CVSS 7.3
    hcr707305003/shiroiAdmingeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  18. CVE-2026-15487Medium
    TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection
    CVSS 6.3
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  19. CVE-2026-15486Medium
    TRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injection
    CVSS 6.3
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  20. CVE-2026-15485Medium
    TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection
    CVSS 6.3
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  21. CVE-2026-15484High
    TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
    CVSS 8.8
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  22. CVE-2026-15483High
    TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
    CVSS 8.8
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 15, 2026View HOL analysis
  23. CVE-2026-15482High
    Aster Telecom Azcall HTTP sis.php sql injection
    CVSS 7.3
    Aster Telecom/Azcallgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  24. CVE-2026-15481High
    Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test command injection
    CVSS 8.8
    Trendnet/TEW-635BRMgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  25. CVE-2026-15480High
    Trendnet TEW-635BRM Web Service rc start_httpd stack-based overflow
    CVSS 8.8
    Trendnet/TEW-635BRMgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  26. CVE-2026-15479High
    H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery
    CVSS 7.3
    H3C/NX15generic
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  27. CVE-2026-15478Medium
    IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection
    CVSS 6.3
    n/a/IceHRMgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  28. CVE-2026-15477Medium
    Bahmni bahmnicore Search Endpoint sql additionalParams sql injection
    CVSS 6.3
    Bahmni/bahmnicoregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  29. CVE-2026-15476Medium
    QILING Disk Master Kernel Driver diskbckp.sys access control
    CVSS 5.3
    QILING/Disk Mastergeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  30. CVE-2026-15475Medium
    MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control
    CVSS 5.3
    MiniTool/Partition Wizardgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  31. CVE-2026-15474Medium
    Eleveo Call Recording Software audio.jsp improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 16, 2026View HOL analysis
  32. CVE-2026-15473Medium
    Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization
    CVSS 6.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  33. CVE-2026-15472Medium
    Eleveo Call Recording Software composeEmailAction.do improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  34. CVE-2026-15471Medium
    Eleveo Call Recording Software pci_dss_status.jsp improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  35. CVE-2026-15470Medium
    Eleveo Call Recording Software group.jsp improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  36. CVE-2026-10660Medium
    Shared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruption
    CVSS 6.4
    zephyrproject/zephyrgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2026-61870Low
    ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder
    CVSS 2.9
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  38. CVE-2026-61861Low
    ImageMagick before 7.1.2-26 Use-After-Free in FormatMagickCaption
    CVSS 3.7
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  39. CVE-2026-61857Low
    ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP
    CVSS 3.7
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  40. CVE-2026-61454Medium
    Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__
    CVSS 5.3
    getgrav/gravgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  41. CVE-2026-61447Critical
    PraisonAI before 1.6.78 Remote Code Execution via CodeAgent
    CVSS 10.0
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  42. CVE-2026-61442High
    PraisonAI Platform before 0.1.9 Authorization Bypass via PATCH
    CVSS 7.1
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  43. CVE-2026-61429High
    PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend
    CVSS 8.5
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  44. CVE-2026-61428High
    PraisonAI AgentMail before 4.6.78 Message Injection via Webhook
    CVSS 7.3
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  45. CVE-2026-61426High
    PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults
    CVSS 8.6
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  46. CVE-2026-60088Medium
    PraisonAI before 4.6.78 Path Traversal via Custom Commands
    CVSS 5.5
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  47. CVE-2026-56372Low
    ImageMagick - Heap Buffer Overflow Read via Unrecognized Magnify Method
    CVSS 3.3
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  48. CVE-2026-56303High
    Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function
    CVSS 7.5
    Capgo/Capgogeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  49. CVE-2026-56296Medium
    Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC
    CVSS 5.3
    Cap-go/capgogeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  50. CVE-2026-56240Medium
    Capgo - Billing Authorization Bypass via Exhausted Usage Credits
    CVSS 4.3
    Capgo/Capgogeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
Page 72 of 327
Previous7071727374Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,456

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 3,551–3,600 of 16,339 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-56281Low
    Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint
    CVSS 3.8
    Capgo/Capgogeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  2. CVE-2026-56271Critical
    Flowise - Weak Default JWT Secrets in Authentication Middleware
    CVSS 9.8
    Flowise/Flowisegeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  3. CVE-2026-56252Medium
    Capgo - Scope Isolation Failure in Webhook Test Endpoint
    CVSS 5.4
    Capgo/Capgogeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  4. CVE-2026-56238High
    Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint
    CVSS 7.5
    Capgo/Capgogeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  5. CVE-2026-15500Medium
    AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery
    CVSS 6.3
    AstrBotDevs/AstrBotgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026View HOL analysis
  6. CVE-2026-15499Medium
    AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskTool.call improper authorization
    CVSS 6.3
    AstrBotDevs/AstrBotgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026View HOL analysis
  7. CVE-2026-15498High
    sergomanov SmartHomeAdatum Login users.php sql injection
    CVSS 7.3
    sergomanov/SmartHomeAdatumgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 13, 2026View HOL analysis
  8. CVE-2026-15497High
    SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection
    CVSS 7.3
    SonicCloudOrg/sonic-agentgeneric
    PublishedJul 12, 2026First seen at HOL Jul 12, 2026Updated Jul 14, 2026View HOL analysis
  9. CVE-2026-15496Medium
    SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection
    CVSS 6.3
    SonicCloudOrg/sonic-agentgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  10. CVE-2026-15495Medium
    SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection
    CVSS 6.3
    SonicCloudOrg/sonic-agentgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 15, 2026View HOL analysis
  11. CVE-2026-15494Medium
    AMTT Hotel Broadband Operation System switch_status.php sql injection
    CVSS 4.7
    AMTT/Hotel Broadband Operation Systemgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  12. CVE-2026-15493Low
    Akpali9 Attendance-Management-System absent.php cross site scripting
    CVSS 3.5
    Akpali9/Attendance-Management-Systemgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  13. CVE-2026-15492Medium
    igweze wizgrade studentConductManager.php cross site scripting
    CVSS 4.3
    igweze/wizgradegeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  14. CVE-2026-15491High
    RafyMrX TOKO-ONLINE-ROTI missing authentication
    CVSS 7.3
    RafyMrX/TOKO-ONLINE-ROTIgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  15. CVE-2026-15490High
    RafyMrX TOKO-ONLINE-ROTI add.php sql injection
    CVSS 7.3
    RafyMrX/TOKO-ONLINE-ROTIgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  16. CVE-2026-15489High
    RafyMrX TOKO-ONLINE-ROTI login.php sql injection
    CVSS 7.3
    RafyMrX/TOKO-ONLINE-ROTIgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 15, 2026View HOL analysis
  17. CVE-2026-15488High
    hcr707305003 shiroiAdmin FileController.php upload unrestricted upload
    CVSS 7.3
    hcr707305003/shiroiAdmingeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  18. CVE-2026-15487Medium
    TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection
    CVSS 6.3
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  19. CVE-2026-15486Medium
    TRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injection
    CVSS 6.3
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  20. CVE-2026-15485Medium
    TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection
    CVSS 6.3
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  21. CVE-2026-15484High
    TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
    CVSS 8.8
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  22. CVE-2026-15483High
    TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
    CVSS 8.8
    TRENDnet/TEW-821DAPgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 15, 2026View HOL analysis
  23. CVE-2026-15482High
    Aster Telecom Azcall HTTP sis.php sql injection
    CVSS 7.3
    Aster Telecom/Azcallgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  24. CVE-2026-15481High
    Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test command injection
    CVSS 8.8
    Trendnet/TEW-635BRMgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  25. CVE-2026-15480High
    Trendnet TEW-635BRM Web Service rc start_httpd stack-based overflow
    CVSS 8.8
    Trendnet/TEW-635BRMgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  26. CVE-2026-15479High
    H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery
    CVSS 7.3
    H3C/NX15generic
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  27. CVE-2026-15478Medium
    IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection
    CVSS 6.3
    n/a/IceHRMgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  28. CVE-2026-15477Medium
    Bahmni bahmnicore Search Endpoint sql additionalParams sql injection
    CVSS 6.3
    Bahmni/bahmnicoregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  29. CVE-2026-15476Medium
    QILING Disk Master Kernel Driver diskbckp.sys access control
    CVSS 5.3
    QILING/Disk Mastergeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  30. CVE-2026-15475Medium
    MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control
    CVSS 5.3
    MiniTool/Partition Wizardgeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  31. CVE-2026-15474Medium
    Eleveo Call Recording Software audio.jsp improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 16, 2026View HOL analysis
  32. CVE-2026-15473Medium
    Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization
    CVSS 6.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026View HOL analysis
  33. CVE-2026-15472Medium
    Eleveo Call Recording Software composeEmailAction.do improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  34. CVE-2026-15471Medium
    Eleveo Call Recording Software pci_dss_status.jsp improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 12, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  35. CVE-2026-15470Medium
    Eleveo Call Recording Software group.jsp improper authorization
    CVSS 4.3
    Eleveo/Call Recording Softwaregeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026View HOL analysis
  36. CVE-2026-10660Medium
    Shared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruption
    CVSS 6.4
    zephyrproject/zephyrgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2026-61870Low
    ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder
    CVSS 2.9
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  38. CVE-2026-61861Low
    ImageMagick before 7.1.2-26 Use-After-Free in FormatMagickCaption
    CVSS 3.7
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  39. CVE-2026-61857Low
    ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP
    CVSS 3.7
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  40. CVE-2026-61454Medium
    Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__
    CVSS 5.3
    getgrav/gravgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  41. CVE-2026-61447Critical
    PraisonAI before 1.6.78 Remote Code Execution via CodeAgent
    CVSS 10.0
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  42. CVE-2026-61442High
    PraisonAI Platform before 0.1.9 Authorization Bypass via PATCH
    CVSS 7.1
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  43. CVE-2026-61429High
    PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend
    CVSS 8.5
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  44. CVE-2026-61428High
    PraisonAI AgentMail before 4.6.78 Message Injection via Webhook
    CVSS 7.3
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  45. CVE-2026-61426High
    PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults
    CVSS 8.6
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  46. CVE-2026-60088Medium
    PraisonAI before 4.6.78 Path Traversal via Custom Commands
    CVSS 5.5
    MervinPraison/PraisonAIgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  47. CVE-2026-56372Low
    ImageMagick - Heap Buffer Overflow Read via Unrecognized Magnify Method
    CVSS 3.3
    ImageMagick/ImageMagickgeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  48. CVE-2026-56303High
    Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function
    CVSS 7.5
    Capgo/Capgogeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  49. CVE-2026-56296Medium
    Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC
    CVSS 5.3
    Cap-go/capgogeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
  50. CVE-2026-56240Medium
    Capgo - Billing Authorization Bypass via Exhausted Usage Credits
    CVSS 4.3
    Capgo/Capgogeneric
    PublishedJul 11, 2026First seen at HOL Jul 13, 2026Updated Jul 13, 2026 Fix availableView HOL analysis
Page 72 of 327
Previous7071727374Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard