Search
16,949 CVEs
CVEs (16,949, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 16,949 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2026-97168 | NONE | — | 2026-09-24 | Rejected reason: it is a suggestion | |
| CVE-2026-97176 | MEDIUM | 4.2 | 2026-09-24 | A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically r… | |
| CVE-2026-97177 | MEDIUM | 6.6 | 2026-09-24 | A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for specific passwo… | |
| CVE-2026-11744 | NONE | — | 2026-09-24 | An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the N… | |
| CVE-2026-81645 | MEDIUM | 5.9 | 2026-09-24 | Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability. | |
| CVE-2026-82077 | HIGH | — | 2026-09-24 | An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenti… | |
| CVE-2026-87739 | MEDIUM | — | 2026-09-24 | An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests… | |
| CVE-2026-97181 | MEDIUM | 5.3 | 2026-09-24 | GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs. | |
| CVE-2026-77193 | HIGH | 7.5 | 2026-09-24 | The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the `id2wp_path` parameter. Thi… | |
| CVE-2026-78308 | CRITICAL | Patched | 9.8 | 2026-09-24 | Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78309 | HIGH | Patched | 8.8 | 2026-09-24 | SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78310 | MEDIUM | Patched | 4.3 | 2026-09-24 | Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78311 | HIGH | Patched | 8.8 | 2026-09-24 | SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78312 | CRITICAL | Patched | 9.1 | 2026-09-24 | Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78313 | MEDIUM | Patched | 6.5 | 2026-09-24 | Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-85682 | HIGH | 8.8 | 2026-09-24 | The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wp_rest no… | |
| CVE-2026-97185 | HIGH | 7.8 | 2026-09-24 | A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-si… | |
| CVE-2026-12227 | CRITICAL | 9.8 | 2026-09-24 | The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-template` paramete… | |
| CVE-2026-15731 | MEDIUM | 6.4 | 2026-09-24 | The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and inc… | |
| CVE-2026-18335 | MEDIUM | 5.4 | 2026-09-24 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including… | |
| CVE-2026-4637 | NONE | — | 2026-09-24 | Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting (XSS) vulnerability. When a request is made for a non-existent re… | |
| CVE-2026-57590 | HIGH | Patched | 8.1 | 2026-09-24 | A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has … |
| CVE-2026-92905 | MEDIUM | 5.3 | 2026-09-24 | ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malform… | |
| CVE-2026-4638 | NONE | — | 2026-09-24 | PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed … | |
| CVE-2026-79680 | NONE | — | 2026-09-24 | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates th… |