https://vulnogram.org/ Most recent CVEs assigned by Bugcrowd Inc. (bugcrowd). https://vulnogram.org/seaview/icons/bugcrowd.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-104480 https://vulnogram.org/CVE-2026-104480 Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alt… Critical Fri, 02 Oct 2026 00:57:55 GMT https://vulnogram.org/CVE-2026-19820 https://vulnogram.org/CVE-2026-19820 A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change t… Medium Tue, 01 Sep 2026 00:13:03 GMT https://vulnogram.org/CVE-2026-7763 https://vulnogram.org/CVE-2026-7763 A heap-based buffer overflow vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio range to cause a Denial of Service (kernel panic) or po… Critical Network Exploitable Fri, 05 Jun 2026 01:39:33 GMT https://vulnogram.org/CVE-2026-7762 https://vulnogram.org/CVE-2026-7762 A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio range to cause a Denial of Service (kernel panic) or… Critical Network Exploitable Fri, 05 Jun 2026 01:36:20 GMT https://vulnogram.org/CVE-2026-7764 https://vulnogram.org/CVE-2026-7764 An out-of-bounds read vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.12 allows an unauthenticated attacker within radio range to disclose a small amount of kernel heap memory or caus… Medium Thu, 04 Jun 2026 00:17:45 GMT https://vulnogram.org/CVE-2026-9264 https://vulnogram.org/CVE-2026-9264 A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the c… Critical Fri, 22 May 2026 01:04:03 GMT https://vulnogram.org/CVE-2026-9057 https://vulnogram.org/CVE-2026-9057 A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available. High Wed, 20 May 2026 04:39:38 GMT https://vulnogram.org/CVE-2026-9056 https://vulnogram.org/CVE-2026-9056 A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user. Medium Wed, 20 May 2026 04:35:39 GMT https://vulnogram.org/CVE-2026-6264 https://vulnogram.org/CVE-2026-6264 A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port. The attack vector is the JMX monitoring port of the Talend JobServer. The vulnerability can be mitigated for… Critical Tue, 14 Apr 2026 01:49:08 GMT https://vulnogram.org/CVE-2025-12792 https://vulnogram.org/CVE-2025-12792 The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) p… Low Tue, 18 Nov 2025 00:18:00 GMT https://vulnogram.org/CVE-2025-8319 https://vulnogram.org/CVE-2025-8319 the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter Medium Network Exploitable Tue, 29 Jul 2025 23:31:31 GMT