Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-32948 — sbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on…

sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Process("cmd", "/c", ...) to run VCS commands (git, hg, svn). The URI fragment (bran…

windows sbt | Injection
Mar 24, 2026 Mar 26, 2026
Mar 24, 2026
Mar 26, 2026
8.8 HIGH
CVE-2026-22559 — "UniFi Network Server Cross-Site Scripting Vulnerability"

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affecte…

Remote | Authentication
Mar 24, 2026 Mar 25, 2026
Mar 24, 2026
Mar 25, 2026
4.3 MEDIUM
CVE-2026-21783 — HCL Traveler is affected by sensitive information disclosure

HCL Traveler is affected by sensitive information disclosure.  The application generates some error messages that provide detailed information about errors and failures, such as internal paths, file …

traveler | Remote | Information Disclosure
Mar 24, 2026 Mar 31, 2026
Mar 24, 2026
Mar 31, 2026
Showing 20 of 6343 Results