CVE Program partner

Bugcrowd

Bugcrowd Inc.

API
CVEs, 365 days1011 all time, 0 rejected
Quality60%median 99%
CVSS by the CNA60%share of records
CWE20%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA40%lower is better
OrganisationBugcrowd Inc.
RoleCNA
TypeBug Bounty Provider, Vendor, Open Source
Reports tomitre
ScopeVulnerabilities discovered by researchers in collaboration with Bugcrowd, with approval of Bugcrowd’s clients, and not in the scope of another CNA.
Advisorieshttps://bugcrowd.com/crowdstream?filter=disclosures

Latest CVEs · RSS

  • CVE-2026-104480 2026-10-02 · CVSS 9.4
    Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control
  • CVE-2026-19820 2026-09-01 · CVSS 5.8
    A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system file
  • CVE-2026-7763 2026-06-05
    A heap-based buffer overflow vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an una
  • CVE-2026-7762 2026-06-05
    A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an u
  • CVE-2026-7764 2026-06-04
    An out-of-bounds read vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.12 allows an unauthenti
  • CVE-2026-9264 2026-05-22
    A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through malici
  • CVE-2026-9057 2026-05-20 · CVSS 8.2
    A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio upd
  • CVE-2026-9056 2026-05-20 · CVSS 5.4
    A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS pa
  • CVE-2026-6264 2026-04-14 · CVSS 9.8
    A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port. The attack vector
  • CVE-2025-12792 2025-11-18 · CVSS 3.2
    The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access
  • CVE-2025-8319 2025-07-29
    the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter

All CVE Program partners