CVEs published July 4, 2026
77,396 CVEs in 2026
The following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per the GHCB spec, when using GHCB v2+ require the software scratch area to reside in the…
The following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN")…
The UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless of whether the import is flagged as unsafe.
Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py).
myVesta is affected by an authenticated remote code execution vulnerability.
An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege.
HestiaCP panel cronjob feature is affected by a broken access control vulnerability.
A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7.
Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter.
Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter.
The following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large…
Five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution.
A vulnerability was found in code-projects Online Job Portal 1.0.
A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0.
A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0.
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0.
A vulnerability was detected in code-projects Online Voting System 1.0.
A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0.
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0.
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0.
A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0.
A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 222ff31c06687b1c6d0e1ab63953f82c3674c52b.
A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35.
The following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc().
A vulnerability has been found in itsourcecode Hospital Management System 1.0.
A vulnerability was detected in code-projects Assessment Management 1.0.
A flaw has been found in code-projects Assessment Management 1.0.
A vulnerability has been found in CodeAstro Ecommerce Website 1.0.
A flaw has been found in itsourcecode Hospital Management System 1.0.
A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2.
A flaw has been found in itsourcecode Hospital Management System 1.0.
A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2.
A weakness has been identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 23105f25dadf57b4314fc015a63a7c6e910c89df.
A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16.
A security vulnerability has been detected in code-projects Assessment Management 1.0.
A weakness has been identified in onnx up to 1.21.x.
A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e01394517.
A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04.
A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce.
A flaw has been found in RT-Thread up to 5.2.2.
A weakness has been identified in NousResearch hermes-agent up to 2026.4.30.
A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1.
A vulnerability was determined in omec-project amf up to 2.1.1.
A vulnerability was detected in Open5GS up to 2.7.7.
A vulnerability was detected in HdrHistogram up to 2.2.2.
A vulnerability has been found in connorskees grass up to 0.13.4.
A flaw has been found in connorskees grass up to 0.13.4.
A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0.
A vulnerability has been found in FederatedAI FATE up to 2.2.0.
A weakness has been identified in code-projects Assessment Management 1.0.
PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system.