Search
43,411 CVEs
CVEs (43,411, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 26–50 of 43,411 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-91221 | CRITICAL | 10.0 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E… | |
| CVE-2026-87337 | CRITICAL | 10.0 | 2026-10-20 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and … | |
| CVE-2026-81212 | CRITICAL | 10.0 | 2026-10-20 | IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platfo… | |
| CVE-2026-101809 | CRITICAL | 10.0 | 2026-10-20 | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily… | |
| CVE-2026-111057 | CRITICAL | Patched | 10.0 | 2026-10-19 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the… |
| CVE-2026-78162 | CRITICAL | Patched | — | 2026-10-19 | Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazel… |
| CVE-2026-95182 | CRITICAL | 10.0 | 2026-10-16 | An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of… | |
| CVE-2026-94169 | CRITICAL | 10.0 | 2026-10-16 | Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1. | |
| CVE-2026-110958 | CRITICAL | 10.0 | 2026-10-15 | A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buff… | |
| CVE-2026-110957 | CRITICAL | 10.0 | 2026-10-15 | A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Proc… | |
| CVE-2026-110536 | CRITICAL | 10.0 | 2026-10-14 | A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipu… | |
| CVE-2026-55572 | CRITICAL | Patched | 10.0 | 2026-10-14 | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username… |
| CVE-2026-107594 | CRITICAL | Patched | 10.0 | 2026-10-14 | The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and th… |
| CVE-2026-106622 | CRITICAL | 10.0 | 2026-10-13 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user int… | |
| CVE-2026-106624 | CRITICAL | 10.0 | 2026-10-13 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the cur… | |
| CVE-2026-105899 | CRITICAL | 10.0 | 2026-10-13 | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user.… | |
| CVE-2026-90532 | CRITICAL | 10.0 | 2026-10-13 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potential… | |
| CVE-2026-48383 | CRITICAL | 10.0 | 2026-10-13 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potential… | |
| CVE-2026-48382 | CRITICAL | 10.0 | 2026-10-13 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potential… | |
| CVE-2026-110130 | CRITICAL | Patched | 10.0 | 2026-10-13 | Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, inc… |
| CVE-2026-103849 | CRITICAL | 10.0 | 2026-10-13 | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the co… | |
| CVE-2026-94603 | CRITICAL | Patched | 10.0 | 2026-10-13 | Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.na… |
| CVE-2026-55675 | CRITICAL | 10.0 | 2026-10-13 | The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-b… | |
| CVE-2024-34323 | CRITICAL | 10.0 | 2026-10-13 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attac… | |
| CVE-2026-65162 | CRITICAL | 10.0 | 2026-10-13 | NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and c… |