Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-30922 — pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with dee…

pyasn1 | Remote | Denial of Service
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
9.6 CRITICAL
CVE-2026-30884 — mdjnelson/moodle-mod_customcert Vulnerable to Authorization Bypass Through User-Controlle…

mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser. Prior to versions 4.4.9 and 5.0.3, a teacher who ho…

Remote | Authorization
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
5.3 MEDIUM
CVE-2026-2575 — Keycloak: keycloak: denial of service due to excessive samlrequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding.…

Remote | Denial of Service
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
7.5 HIGH
CVE-2026-29112 — @dicebear/converter vulnerable to ncontrolled memory allocation via crafted SVG dimensions

DiceBear is an avatar library for designers and developers. Prior to version 9.4.0, the `ensureSize()` function in `@dicebear/converter` read the `width` and `height` attributes from the input SVG to…

Remote | Denial of Service
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
5.3 MEDIUM
CVE-2026-1926 — Subscriptions for WooCommerce <= 1.9.2 - Missing Authorization to Unauthenticated Arbitra…

The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `wps_sfw_admin_cancel_susbcription()` function in al…

Remote | Authorization
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
6.1 MEDIUM
CVE-2026-1780 — [CR]Paid Link Manager <= 0.5 - Reflected Cross-Site Scripting

The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insufficient input sanitization and ou…

Remote | Cross-Site Scripting
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
4.8 MEDIUM
CVE-2026-4356 — itsourcecode University Management System add_result.php cross site scripting

A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add_result.php. Executing a manipulation of the argument vr can lead to cross site…

university_management_system | Remote | Cross-Site Scripting
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
6.4 MEDIUM
CVE-2026-4268 — WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated …

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_custom_js’ parameter in all versions up to, and including, 10.0.05 due to in…

wp_go_maps | Remote | Cross-Site Scripting
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
8.1 HIGH
CVE-2026-2603 — Keycloak: keycloak: unauthorized authentication via disabled saml identity provider

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoint for IdP-initiate…

keycloak | Remote | Authentication
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
7.7 HIGH
CVE-2026-2092 — Keycloak-services: keycloak: unauthorized access via improper validation of encrypted sam…

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An att…

keycloak | Remote | Authentication
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
7.0 HIGH
CVE-2026-29056 — Kanboard's privilege escalation via mass assignment in user invite registration allows an…

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (`UserInviteController::register()`) accepts all POST parameters a…

kanboard | Remote | Authorization
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
8.6 HIGH
CVE-2026-28500 — ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — S…

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to impro…

onnx | Remote | Supply Chain
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
6.9 MEDIUM
CVE-2026-28499 — LeafKit's HTML escaping may be skipped for Collection values, enabling XSS

LeafKit is a templating language with Swift-inspired syntax. Prior to version 1.14.2, HTML escaping doesn't work correctly when a template prints a collection (Array / Dictionary) via `#(value)`. Thi…

leafkit | Remote | Cross-Site Scripting
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
6.9 MEDIUM
CVE-2026-27545 — OpenClaw < 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory Rebind

OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesystem locations by rebinding writa…

openclaw | Authorization
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
3.1 LOW
CVE-2026-27524 — OpenClaw < 2026.2.21 - Prototype Pollution via Debug Override Path

OpenClaw versions prior to 2026.2.21 accept prototype-reserved keys in runtime /debug set override object values, allowing prototype pollution attacks. Authorized /debug set callers can inject __prot…

openclaw | Remote | Injection
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
6.9 MEDIUM
CVE-2026-27523 — OpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Pat…

OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked parent directories with non-existe…

openclaw | Misconfiguration
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
7.1 HIGH
CVE-2026-27522 — OpenClaw < 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message Ac…

OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset. Attackers can hydrate media from loc…

openclaw | Remote | Path Traversal
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
5.8 MEDIUM
CVE-2026-22217 — OpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variab…

OpenClaw version 2026.2.22 prior to 2026.2.23 contain an arbitrary code execution vulnerability in shell-env that allows attackers to execute attacker-controlled binaries by exploiting trusted-prefix…

openclaw | Injection
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
6.4 MEDIUM
CVE-2026-22181 — OpenClaw < 2026.3.2 - DNS Pinning Bypass via Environment Proxy Configuration in web_fetch

OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environment proxy variables are configure…

openclaw | Remote | Server-Side Request Forgery
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
5.3 MEDIUM
CVE-2026-22180 — OpenClaw < 2026.3.2 - Path Confinement Bypass in Browser Output and File Write Operations

OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories. Attackers can exploit insufficient…

openclaw | Path Traversal
Mar 18, 2026 Mar 18, 2026
Mar 18, 2026
Mar 18, 2026
Showing 20 of 5426 Results