Public CVE feed
Public CVE records, affected versions and known exploitation, with sources you can verify.
Presenton Desktop Authentication Middleware app_data information disclosure
Presenton
Presenton API missing authentication
Presenton
imagecodecs 2023.1.23 through 2026.10.10 Stack Buffer Overflow via jpegsof3_decode()
imagecodecs
imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop via ccittfax4_decode()
imagecodecs
OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connections
OpenAlgo
Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes
Thelia Back-office Default Twig Template
Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads
Thelia · Thelia Core · Thelia Back-office Default Twig Template
FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosure
FFmpeg
FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder
FFmpeg
FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder
FFmpeg
FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder
FFmpeg
FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette
FFmpeg
PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scripting
PostyBirb Plus
D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow
DIR-505
XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder
XS-libbrotli
ken678 YznCMS Auth Group Group.php Backend privileges management
YznCMS
Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default
org.apache.thrift:libthrift
Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder
org.apache.mina:mina-core
Visual Studio Spoofing Vulnerability
Microsoft Visual Studio 2017 version 15.9 · Microsoft Visual Studio 2019 version 16.11 · Microsoft Visual Studio 2022 version 17.14
ASP.NET Core Elevation of Privilege Vulnerability
.NET 10.0 installed on Linux · .NET 10.0 installed on Mac OS · .NET 10.0 installed on Windows
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based)
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Cisco Secure Firewall Threat Defense (FTD) Software
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based)
Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files
org.apache.sis:sis-metadata
Out-of-Bounds Write in Google Brotli Decoder
github.com/google/brotli
RCE via stale global state
php-src
RCE via OOM corruption
php-src
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Microsoft Identity Client for NodeJS
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the w
Connect Secure
ipv4: free inet_opt and ireq_opt after an RCU grace period
Linux
Sources: official CVE Program records and CISA KEV. The catalogue starts with recently changed records and selected exploited CVEs, and grows through exact-ID lookups. It is not a complete copy of the CVE List. Updates are attempted hourly.