CVE Radar.

You can follow the current trends of security vulnerabilities.

CVE Radar (103)

Detected during the last 30 days

CVE-2026-67631

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. Continue Reading

CRITICAL

CVE-2026-67636

CVSS: 9

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network. Continue Reading

CRITICAL

CVE-2026-67643

CVSS: 9.8

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. Continue Reading

CRITICAL

CVE-2026-87534

CVSS: 9.8

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium) Continue Reading

CRITICAL

CVE-2026-87544

CVSS: 9.8

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low) Continue Reading

CRITICAL

CVE-2026-21095

CVSS: 9.8

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. Continue Reading

CRITICAL

CVE-2026-21096

CVSS: 9.8

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. Continue Reading

CRITICAL

CVE-2026-86751

CVSS: 8.5

Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image syntax in checkout acceptance notes that survive HTML escaping, are expanded by CommonMark parser, and resolved by laravel-mail-auto-embed via file_get_contents or curl, exfiltrating sensitive files like .env containing APP_KEY. Continue Reading

HIGH

CVE-2026-79941

CVSS: 5.3

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection. Continue Reading

MEDIUM

CVE-2026-79689

CVSS: 5.3

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection. Continue Reading

MEDIUM

Description

News

Affected

References

Attack Vector:

Attack Complexity (AC):

Privileges Required (PR):

User Interaction (UI):

Scope (S):

Availability Impact (A):

Confidentiality Impact (C):

Integrity Impact (I):

Exploitability:

Impact:

Vector String:

Get Free 100 Credits Monthly

Try first, decide later! Get started with a free plan. You can cancel at any time.

Start Free Trial

Ponarize offers an online tool that allows you to check whether a URL & IP address categorization and reputation scoring solution is classified in our Databases. Our goal is to offer you this service at the most affordable prices. We are happy to help you and enjoy working tog.

Spam Check IP Lookup Domain Lookup About Pricing Blog

Contact FAQ GDPR Privacy Policy Terms & Conditions

[email protected]