Search
16,949 CVEs
CVEs (16,949, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 76–100 of 16,949 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105484 | CRITICAL | 10.0 | 2026-10-06 | A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of… | |
| CVE-2026-105285 | CRITICAL | 10.0 | 2026-10-05 | A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rul… | |
| CVE-2026-105284 | CRITICAL | 10.0 | 2026-10-05 | A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authenticatio… | |
| CVE-2026-100103 | CRITICAL | — | 2026-10-05 | Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with networ… | |
| CVE-2026-105134 | CRITICAL | 10.0 | 2026-10-04 | A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Rece… | |
| CVE-2026-105135 | CRITICAL | 10.0 | 2026-10-04 | A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Plan… | |
| CVE-2026-103956 | CRITICAL | Patched | 10.0 | 2026-10-02 | Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the ag… |
| CVE-2026-104610 | CRITICAL | 10.0 | 2026-10-02 | A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the compon… | |
| CVE-2026-55393 | CRITICAL | — | 2026-10-01 | Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read … | |
| CVE-2026-101148 | CRITICAL | 10.0 | 2026-10-01 | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows u… | |
| CVE-2026-55107 | CRITICAL | Patched | 10.0 | 2026-09-30 | Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts (LLM-generated code, user formulas, stu… |
| CVE-2026-102427 | CRITICAL | Patched | 10.0 | 2026-09-30 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal fronte… |
| CVE-2026-96349 | CRITICAL | 10.0 | 2026-09-30 | Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions. | |
| CVE-2026-71379 | CRITICAL | 10.0 | 2026-09-29 | The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request. | |
| CVE-2026-96587 | CRITICAL | 10.0 | 2026-09-29 | The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform s… | |
| CVE-2026-53988 | CRITICAL | Patched | 10.0 | 2026-09-29 | Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack … |
| CVE-2026-102425 | CRITICAL | Patched | 10.0 | 2026-09-29 | Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms supports administrator-defined PHP code which … |
| CVE-2026-102240 | CRITICAL | 10.0 | 2026-09-29 | A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/network_tools of the component Network Tools CGI. The… | |
| CVE-2026-101077 | CRITICAL | 10.0 | 2026-09-28 | A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentica… | |
| CVE-2026-101076 | CRITICAL | 10.0 | 2026-09-28 | A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulatio… | |
| CVE-2026-101075 | CRITICAL | 10.0 | 2026-09-28 | A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Locatio… | |
| CVE-2026-101072 | CRITICAL | 10.0 | 2026-09-28 | A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such manipulation o… | |
| CVE-2026-101039 | CRITICAL | 10.0 | 2026-09-28 | A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulat… | |
| CVE-2026-101000 | CRITICAL | 10.0 | 2026-09-28 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the comp… | |
| CVE-2026-101001 | CRITICAL | 10.0 | 2026-09-28 | A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management … |