Search
16,950 CVEs
CVEs (16,950, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 376–400 of 16,950 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102175 | CRITICAL | 9.8 | 2026-10-14 | A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker … | |
| CVE-2026-102178 | CRITICAL | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routi… | |
| CVE-2026-102031 | CRITICAL | 9.8 | 2026-10-14 | An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privil… | |
| CVE-2026-101990 | CRITICAL | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to ca… | |
| CVE-2026-101980 | CRITICAL | 9.8 | 2026-10-14 | An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a den… | |
| CVE-2026-101986 | CRITICAL | 9.8 | 2026-10-14 | An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authenticati… | |
| CVE-2026-101956 | CRITICAL | 9.8 | 2026-10-14 | An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary J… | |
| CVE-2026-101950 | CRITICAL | 9.8 | 2026-10-14 | A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of s… | |
| CVE-2026-59774 | CRITICAL | 9.8 | 2026-10-14 | Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated … | |
| CVE-2026-110645 | CRITICAL | Patched | 9.8 | 2026-10-14 | Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into… |
| CVE-2026-110649 | CRITICAL | Patched | 9.8 | 2026-10-14 | Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can na… |
| CVE-2026-110650 | CRITICAL | 9.8 | 2026-10-14 | The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell… | |
| CVE-2026-110639 | CRITICAL | Patched | 9.8 | 2026-10-14 | @mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or ta… |
| CVE-2026-110640 | CRITICAL | 9.8 | 2026-10-14 | Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language… | |
| CVE-2026-110643 | CRITICAL | 9.8 | 2026-10-14 | transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted audioPath values to transcribeA… | |
| CVE-2026-110644 | CRITICAL | 9.8 | 2026-10-14 | nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file … | |
| CVE-2026-110634 | CRITICAL | Patched | 9.8 | 2026-10-14 | git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attack… |
| CVE-2026-110635 | CRITICAL | Patched | 9.8 | 2026-10-14 | webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attack… |
| CVE-2026-110636 | CRITICAL | 9.8 | 2026-10-14 | pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied … | |
| CVE-2026-110638 | CRITICAL | 9.8 | 2026-10-14 | doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). At… | |
| CVE-2026-110631 | CRITICAL | 9.8 | 2026-10-14 | Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty… | |
| CVE-2026-110612 | CRITICAL | 9.8 | 2026-10-14 | vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. … | |
| CVE-2020-37282 | CRITICAL | 9.8 | 2026-10-14 | office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted fileName to generatePdf() or … | |
| CVE-2026-108065 | CRITICAL | 9.8 | 2026-10-14 | SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated … | |
| CVE-2026-16741 | CRITICAL | Patched | 9.8 | 2026-10-14 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cy… |