[ Vulnerability Database ]
A comprehensive hub for tracking high-impact vulnerabilities across application code and third-party libraries, for security teams and developers.
Trusted by Startups to Fortune 100
CVE-2026-17497
(8.3)
Command Injection (CWE-78) via Tauri Shell in NoteGen
Remote Code Execution
CVE-2026-17496
(8.1)
Prompt-Induced XSS (CWE-79) in NoteGen Chat Preview
Arbitrary Script Execution in Application Context
CVE-2026-63720
(7.5)
Code Injection (CWE-94) in datamodel-code-generator
Remote Code Execution
CVE-2026-66012
(10.0)
Missing Authorization (CWE-862) in SiYuan MCP Endpoint
Remote Workspace Compromise and Privilege Escalation
CVE-2025-71408
(7.8)
Eval Injection (CWE-95) in NLTK Collocations Module
Remote Code Execution
CVE-2026-54342
(8.1)
Improper TLS Certificate Validation (CWE-295) in epa4all
Confidentiality and Integrity Compromise via TLS MITM
CVE-2026-48021
(9.1)
TLS Trust Failure (CWE-295) in epa4all VAU Handshake
Confidentiality and Integrity Compromise of Encrypted Session
CVE-2026-65711
(7.2)
OS Command Injection (CWE-78) in sysPass Backup Path
Arbitrary Command Execution
CVE-2026-65710
(7.1)
Authorization Bypass (CWE-639) in sysPass Public Links
Unauthorized Credential Disclosure
CVE-2026-65709
(8.3)
Broken Object-Level Authorization (CWE-639) in sysPass API
Unauthorized Account Access and Modification
Let AI Fix Your Code, You Build the Future
Get Pentest Report
