Search
9,965 CVEs · Critical severity
CVEs (9,965, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 351–375 of 9,965 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-111673 | CRITICAL | 9.8 | 2026-10-16 | IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is exc… | |
| CVE-2026-111663 | CRITICAL | 8.6 | 2026-10-16 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mut… | |
| CVE-2026-111643 | CRITICAL | 9.8 | 2026-10-16 | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprot… | |
| CVE-2026-111641 | CRITICAL | 9.8 | 2026-10-16 | FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-l… | |
| CVE-2026-111636 | CRITICAL | 8.1 | 2026-10-16 | OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-c… | |
| CVE-2026-111626 | CRITICAL | 9.8 | 2026-10-16 | Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes because controller autho… | |
| CVE-2026-109588 | CRITICAL | Patched | 8.8 | 2026-10-16 | Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might … |
| CVE-2026-109587 | CRITICAL | Patched | 8.8 | 2026-10-16 | Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to re… |
| CVE-2026-102551 | CRITICAL | Patched | 7.7 | 2026-10-16 | Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third… |
| CVE-2026-92262 | CRITICAL | Patched | 9.9 | 2026-10-16 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affec… |
| CVE-2026-85748 | CRITICAL | Patched | 9.9 | 2026-10-16 | MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can … |
| CVE-2026-85746 | CRITICAL | Patched | 9.9 | 2026-10-16 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an alloca… |
| CVE-2026-57169 | CRITICAL | Patched | 9.6 | 2026-10-16 | Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the We… |
| CVE-2026-49868 | CRITICAL | Patched | 9.8 | 2026-10-16 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, _parse_reply() in sys/net/appl… |
| CVE-2026-102693 | CRITICAL | Patched | 9.6 | 2026-10-16 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwin… |
| CVE-2026-102692 | CRITICAL | Patched | 9.1 | 2026-10-16 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, nanocoap accepts oversized CoA… |
| CVE-2026-44977 | CRITICAL | Patched | 9.0 | 2026-10-16 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global applicat… |
| CVE-2026-26846 | CRITICAL | 9.8 | 2026-10-16 | Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component | |
| CVE-2026-95182 | CRITICAL | 10.0 | 2026-10-16 | An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of… | |
| CVE-2026-105279 | CRITICAL | 9.1 | 2026-10-16 | In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patie… | |
| CVE-2026-18516 | CRITICAL | 9.6 | 2026-10-16 | An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP … | |
| CVE-2026-107617 | CRITICAL | 9.8 | 2026-10-16 | An attacker can use a hard-coded credential to log in to EseeCloud devices. | |
| CVE-2026-64959 | CRITICAL | Patched | 9.8 | 2026-10-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact mos… |
| CVE-2026-64610 | CRITICAL | Patched | 9.8 | 2026-10-16 | Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache… |
| CVE-2026-63619 | CRITICAL | Patched | 9.1 | 2026-10-16 | Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services… |