CVE Notifier

CVE-2026-24073 CWE-787 7.8

Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

cve.org Qualcomm, · Inc.:Snapdragon 6 hari lalu

CVE-2025-59607 CWE-822 7.8

Untrusted Pointer Dereference in Windows Compute

Memory Corruption when copying large input data exceeds normal allocation limits.

cve.org Qualcomm, · Inc.:Snapdragon 6 hari lalu

CVE-2026-50604 CWE-306 N/A

Unauthenticated Access Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the serv…

cve.org Acer:Agent · Service 6 hari lalu

CVE-2026-50603 CWE-321 N/A

Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under cer…

cve.org Acer:Agent · Service 6 hari lalu

CVE-2026-92839 CWE-174 4.3

CVE-2026-92839

Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s session.

cve.org Canva:Canva 6 hari lalu

CVE-2026-86311 CWE-79 6.4

Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortcode Attributes in all versions up to, and including, 1.8.44 due to insufficient i…

Wordfence 10web:Photo · Gallery · by 6 hari lalu

CVE-2026-89064 CWE-522 5.3

All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the `Ai1wm_Main_Controller::init()` method — registe…

Wordfence servmask:All-in-One · WP · Migration 6 hari lalu

CVE-2026-92838 CWE-427 7.8

GeoVision GV-Remote E-Map dll hijacking vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a …

cve.org GeoVision · Inc.:GV-Remote · E-map 6 hari lalu

CVE-2026-81546 CWE-121 7.7

CVE-2026-81546

The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a…

cve.org Canva:Affinity 6 hari lalu

CVE-2026-52483 CWE-? N/A

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(WVK.0)b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafte…

cve.org n/a:n/a 6 hari lalu

CVE-2025-55787 CWE-? N/A

CVE-2025-55787

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

MITRE n/a:n/a 6 hari lalu

CVE-2021-3030 CWE-? N/A

CVE-2021-3030

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. A remote, unauthenticated attacker can craft a URL that, once…

MITRE n/a:n/a 6 hari lalu