Search
37,428 CVEs · Critical severity
CVEs (37,428, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 101–125 of 37,428 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109619 | CRITICAL | Patched | 8.1 | 2026-10-21 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being rese… |
| CVE-2026-114403 | CRITICAL | 8.1 | 2026-10-21 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted… | |
| CVE-2026-114087 | CRITICAL | Patched | 8.1 | 2026-10-21 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded… |
| CVE-2026-114053 | CRITICAL | Patched | 8.1 | 2026-10-21 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which re… |
| CVE-2016-20101 | CRITICAL | Patched | 8.1 | 2026-10-20 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the… |
| CVE-2026-113613 | CRITICAL | Patched | 8.1 | 2026-10-20 | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive … |
| CVE-2026-111636 | CRITICAL | 8.1 | 2026-10-16 | OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-c… | |
| CVE-2026-111391 | CRITICAL | 8.1 | 2026-10-16 | SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbo… | |
| CVE-2026-110858 | CRITICAL | Patched | 8.1 | 2026-10-14 | GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard inspects only keyword arguments, not the positi… |
| CVE-2026-110770 | CRITICAL | 8.1 | 2026-10-14 | Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/us… | |
| CVE-2026-102084 | CRITICAL | Patched | 8.1 | 2026-10-14 | An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based a… |
| CVE-2026-102062 | CRITICAL | 8.1 | 2026-10-14 | An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker t… | |
| CVE-2026-102037 | CRITICAL | 8.1 | 2026-10-14 | An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker … | |
| CVE-2026-101997 | CRITICAL | 8.1 | 2026-10-14 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthent… | |
| CVE-2026-101955 | CRITICAL | 8.1 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary… | |
| CVE-2026-97205 | CRITICAL | 8.1 | 2026-10-14 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing … | |
| CVE-2026-93479 | CRITICAL | 8.1 | 2026-10-14 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex c… | |
| CVE-2026-15176 | CRITICAL | 8.1 | 2026-10-14 | A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive r… | |
| CVE-2026-110646 | CRITICAL | Patched | 8.1 | 2026-10-14 | Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL. … |
| CVE-2026-110632 | CRITICAL | 8.1 | 2026-10-14 | Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking t… | |
| CVE-2026-110616 | CRITICAL | 8.1 | 2026-10-14 | NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token f… | |
| CVE-2020-37281 | CRITICAL | 8.1 | 2026-10-14 | Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs… | |
| CVE-2026-110112 | CRITICAL | Patched | 8.1 | 2026-10-13 | Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims … |
| CVE-2026-109573 | CRITICAL | Patched | 8.1 | 2026-10-12 | phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or M… |
| CVE-2020-37279 | CRITICAL | 8.1 | 2026-10-12 | easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting shell metacharacters into source pa… |