Search
151,644 CVEs · High severity
CVEs (151,644, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 376–400 of 151,644 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97409 | HIGH | 8.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONN… | |
| CVE-2026-9740 | HIGH | Patched | 7.5 | 2026-06-09 | A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON valida… |
| CVE-2026-97398 | HIGH | 7.2 | 2026-10-14 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and including, 7.… | |
| CVE-2026-97395 | HIGH | 8.1 | 2026-09-29 | Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table met… | |
| CVE-2026-97394 | HIGH | Patched | 7.5 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then deref… |
| CVE-2026-97380 | HIGH | Patched | 8.8 | 2026-10-16 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an … |
| CVE-2026-97370 | HIGH | Patched | 7.5 | 2026-10-15 | Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VM_JMP… |
| CVE-2026-97363 | HIGH | 7.5 | 2026-10-02 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct … | |
| CVE-2026-97362 | HIGH | 7.5 | 2026-09-24 | HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by s… | |
| CVE-2026-97347 | HIGH | 7.2 | 2026-09-30 | The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 1.1.7 due to insu… | |
| CVE-2026-97342 | HIGH | 7.2 | 2026-10-02 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action in a… | |
| CVE-2026-97341 | HIGH | 7.2 | 2026-10-03 | The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and … | |
| CVE-2026-97339 | HIGH | 7.2 | 2026-10-16 | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all… | |
| CVE-2026-97337 | HIGH | 7.5 | 2026-10-03 | The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 v… | |
| CVE-2026-97336 | HIGH | 7.2 | 2026-10-02 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up to, and including, 2.13.0 due to insufficient input… | |
| CVE-2026-97335 | HIGH | Patched | 7.7 | 2026-09-28 | Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux allows an authe… |
| CVE-2026-97334 | HIGH | Patched | — | 2026-10-13 | The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance releas… |
| CVE-2026-97333 | HIGH | Patched | — | 2026-10-13 | QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Comm… |
| CVE-2026-97328 | HIGH | Patched | 7.5 | 2026-10-22 | The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser re-emits into element attributes when a non-default image delivery mode… |
| CVE-2026-97326 | HIGH | 7.3 | 2026-09-24 | A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown functionality of the file chat-… | |
| CVE-2026-97313 | HIGH | 7.5 | 2026-10-21 | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a deni… | |
| CVE-2026-97312 | HIGH | Patched | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this… |
| CVE-2026-97309 | HIGH | — | 2026-10-05 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a th… | |
| CVE-2026-97307 | HIGH | 7.5 | 2026-10-04 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.Th… | |
| CVE-2026-97303 | HIGH | 7.6 | 2026-10-05 | Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured A… |