SecLookup

Look up any vulnerability, weakness, attack technique or security control.

Try log4j CVE-2021-44228 sql injection CWE-79 T1059.001 cozy bear A01:2025 LLM01:2025 AC-2 Random exploited CVE

Latest CVEs View all

  • CVE-2026-119145 9.4 Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not… 2026-10-29
  • CVE-2026-119144 8.7 Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because user-controlled… 2026-10-29
  • CVE-2026-119143 5.9 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code to trigger a host… 2026-10-29
  • CVE-2026-119142 5.9 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the Future returned by… 2026-10-29
  • CVE-2026-119141 6.9 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious Wasm modules to… 2026-10-29
  • CVE-2026-119140 5.9 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious components to panic… 2026-10-29
  • CVE-2026-119139 5.9 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports… 2026-10-29
  • CVE-2026-119138 5.9 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows pending calls to trigger an… 2026-10-29

Newly exploited (CISA KEV) View all

  • CVE-2026-46300 7.8 Linux Kernel Missing Initialization of a Variable Vulnerability 2026-10-28
  • CVE-2026-41709 2.7 Broadcom VMWare ESX Insufficient Logging Vulnerability 2026-10-28
  • CVE-2026-48356 9.3 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability 2026-10-27
  • CVE-2026-111497 9.2 Google Brotli Unchecked Return Value Vulnerability 2026-10-27
  • CVE-2026-109619 9.2 PHP Stale Internal Request-State Vulnerability 2026-10-26
  • CVE-2026-109618 9.2 PHP Memory Corruption Vulnerability 2026-10-26
  • CVE-2026-114625 9.4 Arista VeloCloud Orchestrator SQL Injection Vulnerability 2026-10-23
  • CVE-2026-110447 9.2 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability 2026-10-23

CVE data updated 2026-10-29 18:13:45 UTC