Search
16,950 CVEs
CVEs (16,950, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 401–425 of 16,950 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16740 | CRITICAL | Patched | 9.8 | 2026-10-14 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical applian… |
| CVE-2026-108291 | CRITICAL | 9.8 | 2026-10-14 | Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1. | |
| CVE-2026-107424 | CRITICAL | 9.8 | 2026-10-14 | Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: fr… | |
| CVE-2026-104748 | CRITICAL | 9.8 | 2026-10-14 | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and … | |
| CVE-2026-87855 | CRITICAL | 9.8 | 2026-10-14 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This… | |
| CVE-2026-104800 | CRITICAL | 9.8 | 2026-10-14 | The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is… | |
| CVE-2026-97657 | CRITICAL | 9.8 | 2026-10-14 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and i… | |
| CVE-2026-97668 | CRITICAL | 9.8 | 2026-10-14 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10… | |
| CVE-2026-110002 | CRITICAL | 9.8 | 2026-10-14 | The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is du… | |
| CVE-2026-93388 | CRITICAL | 9.8 | 2026-10-14 | The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all version… | |
| CVE-2026-110392 | CRITICAL | 9.8 | 2026-10-14 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection. | |
| CVE-2026-49950 | CRITICAL | 9.8 | 2026-10-13 | Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over … | |
| CVE-2026-63146 | CRITICAL | Patched | 9.8 | 2026-10-13 | Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration… |
| CVE-2026-104252 | CRITICAL | Patched | 9.8 | 2026-10-13 | Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action… |
| CVE-2026-104585 | CRITICAL | 9.8 | 2026-10-13 | Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module. | |
| CVE-2026-97816 | CRITICAL | Patched | 9.8 | 2026-10-13 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97814 | CRITICAL | Patched | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97815 | CRITICAL | Patched | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97805 | CRITICAL | Patched | 9.8 | 2026-10-13 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97749 | CRITICAL | 9.8 | 2026-10-13 | Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97016 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-96934 | CRITICAL | Patched | 9.8 | 2026-10-13 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96924 | CRITICAL | Patched | 9.8 | 2026-10-13 | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96909 | CRITICAL | Patched | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96864 | CRITICAL | 9.8 | 2026-10-13 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. |