Search
16,950 CVEs
CVEs (16,950, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 351–375 of 16,950 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111322 | CRITICAL | 9.8 | 2026-10-15 | Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 … | |
| CVE-2026-111281 | CRITICAL | Patched | 9.8 | 2026-10-15 | Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands… |
| CVE-2026-105038 | CRITICAL | 9.8 | 2026-10-15 | The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote atta… | |
| CVE-2026-102764 | CRITICAL | Patched | 9.8 | 2026-10-15 | The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it receiv… |
| CVE-2026-84731 | CRITICAL | 9.8 | 2026-10-15 | An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal m… | |
| CVE-2026-104586 | CRITICAL | 9.8 | 2026-10-15 | AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi. | |
| CVE-2026-109686 | CRITICAL | 9.8 | 2026-10-15 | Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a th… | |
| CVE-2026-109694 | CRITICAL | 9.8 | 2026-10-15 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5. | |
| CVE-2026-109145 | CRITICAL | 9.8 | 2026-10-15 | The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered account… | |
| CVE-2026-101306 | CRITICAL | 9.8 | 2026-10-15 | SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restriction by sending the descriptor t… | |
| CVE-2026-108587 | CRITICAL | 9.8 | 2026-10-15 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includin… | |
| CVE-2026-110911 | CRITICAL | Patched | 9.8 | 2026-10-15 | Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's … |
| CVE-2026-55680 | CRITICAL | Patched | 9.8 | 2026-10-14 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL exp… |
| CVE-2026-55683 | CRITICAL | Patched | 9.8 | 2026-10-14 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through ext… |
| CVE-2026-55684 | CRITICAL | Patched | 9.8 | 2026-10-14 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded … |
| CVE-2026-55573 | CRITICAL | Patched | 9.8 | 2026-10-14 | e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps POST parameter and passes it to unserialize() at file … |
| CVE-2026-101982 | CRITICAL | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cau… | |
| CVE-2026-101983 | CRITICAL | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remot… | |
| CVE-2026-101954 | CRITICAL | 9.8 | 2026-10-14 | An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unau… | |
| CVE-2026-76519 | CRITICAL | 9.8 | 2026-10-14 | A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on t… | |
| CVE-2026-33796 | CRITICAL | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor… | |
| CVE-2026-33789 | CRITICAL | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cau… | |
| CVE-2026-33792 | CRITICAL | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as r… | |
| CVE-2026-109439 | CRITICAL | 9.8 | 2026-10-14 | Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persist… | |
| CVE-2026-102182 | CRITICAL | Patched | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as roo… |