HackZoneLabs News
Newsletter

CVE records

39918 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-114563OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114562OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114561OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114560OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114559OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114569OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-122044Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability12 Nov 20268.8
CVE-2026-118632Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability12 Nov 20268.0
CVE-2026-118631Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability12 Nov 20263.8
CVE-2026-121753Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-121752Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-121744Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-121743Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-121742Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-13269Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability12 Nov 20267.5
CVE-2026-13270Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability12 Nov 20267.5
CVE-2026-121741Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2025-10935libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-126957ICMPv4 Record Route / Timestamp option: stack OOB read via ptr underflow in icmpv4.c12 Nov 20266.9
CVE-2026-126795ToolJet Onboarding Signup Endpoint util.service.ts activateUserWithPassword missing authentication12 Nov 20267.5
CVE-2026-126673Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in _dump_qr12 Nov 2026
CVE-2026-126785rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permission12 Nov 20269.3
CVE-2026-125785WordPress JetEngine plugin <= 3.9.1 - Cross Site Scripting (XSS) vulnerability12 Nov 20266.5
CVE-2026-125786WordPress Quiz And Survey Master plugin <= 11.3.0 - Content Injection vulnerability12 Nov 20265.3
CVE-2026-125787WordPress Quiz And Survey Master plugin <= 11.3.0 - Broken Access Control vulnerability12 Nov 20265.4
CVE-2026-126759H3C ICG2000 Unified Communication Gateway Web Management check.j missing authentication11 Nov 20266.9
CVE-2026-126758Moonshot AI Kimi Code WorkspaceDirsService local.toml reliance on untrusted inputs in a security decision11 Nov 20264.8
CVE-2026-126935Zipline before 4.8.0 maxViews Limit Bypass via Race Condition11 Nov 20266.3
CVE-2026-126934Zipline 4.3.2 before 4.8.0 Rate Limit Bypass via Spoofed X-Forwarded-For11 Nov 20266.9
CVE-2026-126933Zipline 4.0.0 before 4.8.0 Disabled Extensions Upload Filter Bypass via Extension Format Mismatch11 Nov 20265.3
CVE-2026-126932Zipline 4.6.2 before 4.8.0 Disabled MIME Type Policy Bypass via File Metadata Update11 Nov 20265.3
CVE-2026-126757Moonshot AI Kimi Code Web UI index-HU0LCM-X.js isOriginAllowed redirect11 Nov 20265.3
CVE-2026-12689911 Nov 20268.8
CVE-2026-12692011 Nov 20264.3
CVE-2026-12686011 Nov 20268.8
CVE-2026-12689011 Nov 20268.8
CVE-2026-12691311 Nov 20263.4
CVE-2026-12692111 Nov 20268.8
CVE-2026-12686811 Nov 20268.8
CVE-2026-12690211 Nov 20267.5
CVE-2026-12684111 Nov 20263.1
CVE-2026-12685011 Nov 20265.3
CVE-2026-12685211 Nov 20268.8
CVE-2026-12690111 Nov 20268.8
CVE-2026-12684911 Nov 20268.8
CVE-2026-12690811 Nov 20268.8
CVE-2026-12685511 Nov 20266.8
CVE-2026-12689311 Nov 20268.8
CVE-2026-12691511 Nov 20267.5
CVE-2026-12690611 Nov 20265.9