Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-67198
High · 7.5
CWE-616 Aug 4, 2026
Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher
Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with no viewport set or MakeTableReq with no data field to trigger unwrap() calls on None values at nine distinct sites, causing the process to abort with SIGABRT.
CVE-2025-67084
Critical · 9.9
CWE-616 Jan 15, 2026
File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers…
File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely, leading to Remote Code Execution (RCE).