Search
37,428 CVEs · Critical severity
CVEs (37,428, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 101–125 of 37,428 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-95675 | CRITICAL | 9.8 | 2026-09-22 | D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands… | |
| CVE-2026-95606 | CRITICAL | 9.8 | 2026-10-07 | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a thr… | |
| CVE-2026-95605 | CRITICAL | 9.3 | 2026-10-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection.… | |
| CVE-2026-95601 | CRITICAL | 9.3 | 2026-09-23 | Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions. | |
| CVE-2026-9559 | CRITICAL | 9.9 | 2026-05-29 | A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports, a flaw in the validation logic… | |
| CVE-2026-9558 | CRITICAL | 9.9 | 2026-05-29 | A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function res… | |
| CVE-2026-9543 | CRITICAL | 9.8 | 2026-05-26 | A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Managem… | |
| CVE-2026-95357 | CRITICAL | Patched | 9.6 | 2026-09-29 | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c… |
| CVE-2026-95356 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside… |
| CVE-2026-95350 | CRITICAL | Patched | 9.6 | 2026-09-29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa… |
| CVE-2026-95349 | CRITICAL | Patched | 9.6 | 2026-09-29 | Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cra… |
| CVE-2026-95347 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traf… |
| CVE-2026-95339 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Ch… |
| CVE-2026-95331 | CRITICAL | Patched | 9.6 | 2026-09-29 | Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML … |
| CVE-2026-95329 | CRITICAL | Patched | 9.6 | 2026-09-29 | Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-95325 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.… |
| CVE-2026-95318 | CRITICAL | Patched | 9.6 | 2026-09-29 | Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page… |
| CVE-2026-95313 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML … |
| CVE-2026-95311 | CRITICAL | Patched | 9.6 | 2026-09-29 | Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outsi… |
| CVE-2026-95310 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromiu… |
| CVE-2026-95299 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium sec… |
| CVE-2026-95284 | CRITICAL | Patched | 9.6 | 2026-09-29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa… |
| CVE-2026-95283 | CRITICAL | Patched | 9.6 | 2026-09-29 | Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craf… |
| CVE-2026-95281 | CRITICAL | Patched | 9.6 | 2026-09-29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa… |
| CVE-2026-95277 | CRITICAL | Patched | 9.6 | 2026-09-29 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.… |