Search
98,287 CVEs
CVEs (98,287, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 98,287 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-89309 | CRITICAL | 10.0 | 2026-10-13 | The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD… | |
| CVE-2026-109110 | CRITICAL | 10.0 | 2026-10-13 | A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command i… | |
| CVE-2026-109109 | CRITICAL | 10.0 | 2026-10-13 | A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Set… | |
| CVE-2026-97229 | CRITICAL | Patched | 10.0 | 2026-10-13 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, co… |
| CVE-2026-89111 | CRITICAL | 10.0 | 2026-10-13 | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redi… | |
| CVE-2026-108917 | CRITICAL | 10.0 | 2026-10-12 | A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the a… | |
| CVE-2026-108918 | CRITICAL | 10.0 | 2026-10-12 | A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to c… | |
| CVE-2026-108907 | CRITICAL | 10.0 | 2026-10-12 | A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authenticatio… | |
| CVE-2026-108892 | CRITICAL | 10.0 | 2026-10-12 | A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac … | |
| CVE-2026-108804 | CRITICAL | 10.0 | 2026-10-12 | A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web… | |
| CVE-2026-108576 | CRITICAL | 10.0 | 2026-10-11 | A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manipulation of t… | |
| CVE-2026-42696 | CRITICAL | 10.0 | 2026-10-10 | Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migra… | |
| CVE-2026-94503 | CRITICAL | 10.0 | 2026-10-09 | Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a throu… | |
| CVE-2026-96207 | CRITICAL | 10.0 | 2026-10-08 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-12260 | CRITICAL | — | 2026-10-08 | SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The p… | |
| CVE-2026-76482 | CRITICAL | 10.0 | 2026-10-07 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Pr… | |
| CVE-2025-70518 | CRITICAL | 10.0 | 2026-10-07 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling … | |
| CVE-2026-102255 | CRITICAL | 10.0 | 2026-10-07 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unau… | |
| CVE-2026-106102 | CRITICAL | Patched | 10.0 | 2026-10-06 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead() serializer in ui/src/plugins/meta/Meta.js used… |
| CVE-2026-105857 | CRITICAL | Patched | 10.0 | 2026-10-06 | Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, … |
| CVE-2026-63692 | CRITICAL | Patched | 10.0 | 2026-10-06 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote a… |
| CVE-2026-63688 | CRITICAL | Patched | 10.0 | 2026-10-06 | Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC… |
| CVE-2026-39770 | CRITICAL | 10.0 | 2026-10-06 | Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions. | |
| CVE-2026-39773 | CRITICAL | 10.0 | 2026-10-06 | Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions. | |
| CVE-2026-32579 | CRITICAL | 10.0 | 2026-10-06 | Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions. |