Search
1,463 CVEs · Critical severity
CVEs (1,463, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 276–300 of 1,463 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-113703 | CRITICAL | Patched | 9.3 | 2026-10-20 | SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middlewar… |
| CVE-2026-113682 | CRITICAL | Patched | 7.4 | 2026-10-20 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-de… |
| CVE-2026-113678 | CRITICAL | Patched | 9.9 | 2026-10-20 | Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary hos… |
| CVE-2026-113613 | CRITICAL | Patched | 8.1 | 2026-10-20 | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive … |
| CVE-2026-103119 | CRITICAL | Patched | 9.1 | 2026-10-20 | Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the nex… |
| CVE-2026-101356 | CRITICAL | Patched | 9.1 | 2026-10-20 | Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between… |
| CVE-2026-101296 | CRITICAL | Patched | — | 2026-10-20 | A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed att… |
| CVE-2026-113620 | CRITICAL | 9.8 | 2026-10-20 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The payload is decoded and it… | |
| CVE-2026-105312 | CRITICAL | 9.9 | 2026-10-20 | A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this ima… | |
| CVE-2026-9589 | CRITICAL | — | 2026-10-20 | Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud de… | |
| CVE-2026-43845 | CRITICAL | — | 2026-10-20 | A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. | |
| CVE-2026-43844 | CRITICAL | — | 2026-10-20 | A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. | |
| CVE-2026-43838 | CRITICAL | — | 2026-10-20 | A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. | |
| CVE-2026-43836 | CRITICAL | — | 2026-10-20 | A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. | |
| CVE-2026-113380 | CRITICAL | Patched | — | 2026-10-20 | In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio … |
| CVE-2026-77936 | CRITICAL | 9.8 | 2026-10-20 | Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it… | |
| CVE-2026-77933 | CRITICAL | 9.8 | 2026-10-20 | DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all … | |
| CVE-2026-77932 | CRITICAL | 9.8 | 2026-10-20 | DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers fu… | |
| CVE-2026-77930 | CRITICAL | Patched | 9.8 | 2026-10-20 | EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an… |
| CVE-2026-75128 | CRITICAL | 9.8 | 2026-10-20 | Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered sh… | |
| CVE-2026-109444 | CRITICAL | 9.8 | 2026-10-20 | OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless … | |
| CVE-2026-109442 | CRITICAL | 9.8 | 2026-10-20 | piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication… | |
| CVE-2026-112900 | CRITICAL | Patched | — | 2026-10-19 | Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript … |
| CVE-2026-112403 | CRITICAL | Patched | — | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecod… |
| CVE-2026-112398 | CRITICAL | Patched | — | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG d… |