Search
4,651 CVEs
CVEs (4,651, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 101–125 of 4,651 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-79852 | CRITICAL | 9.8 | 2026-10-22 | A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Succe… | |
| CVE-2026-79853 | CRITICAL | 9.8 | 2026-10-22 | Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the… | |
| CVE-2026-79854 | CRITICAL | 9.8 | 2026-10-22 | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful … | |
| CVE-2026-79855 | CRITICAL | 9.8 | 2026-10-22 | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful explo… | |
| CVE-2026-79856 | CRITICAL | 9.8 | 2026-10-22 | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Suc… | |
| CVE-2026-79857 | CRITICAL | 9.8 | 2026-10-22 | There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution… | |
| CVE-2022-51026 | CRITICAL | Patched | 9.8 | 2026-10-22 | Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting clien… |
| CVE-2026-112832 | CRITICAL | 9.8 | 2026-10-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CozyThemes Rootblox rootblox allows PHP Local File … | |
| CVE-2021-48014 | CRITICAL | 9.8 | 2026-10-22 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary fil… | |
| CVE-2021-48016 | CRITICAL | 9.8 | 2026-10-22 | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauth… | |
| CVE-2026-112241 | CRITICAL | 9.8 | 2026-10-22 | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5. | |
| CVE-2026-96639 | CRITICAL | Patched | 9.8 | 2026-10-21 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame o… |
| CVE-2026-111183 | CRITICAL | 9.8 | 2026-10-21 | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta… | |
| CVE-2026-76474 | CRITICAL | 9.8 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisc… | |
| CVE-2026-76466 | CRITICAL | 9.8 | 2026-10-21 | A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device … | |
| CVE-2026-76473 | CRITICAL | 9.8 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisc… | |
| CVE-2026-109618 | CRITICAL | Patched | 9.8 | 2026-10-21 | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario an… |
| CVE-2026-114119 | CRITICAL | Patched | 9.8 | 2026-10-21 | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be cha… |
| CVE-2026-114108 | CRITICAL | Patched | 9.8 | 2026-10-21 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requi… |
| CVE-2026-113736 | HIGH | 9.8 | 2026-10-21 | A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the comp… | |
| CVE-2026-92559 | CRITICAL | 9.8 | 2026-10-20 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address. | |
| CVE-2026-91665 | CRITICAL | 9.8 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attac… | |
| CVE-2026-91495 | CRITICAL | 9.8 | 2026-10-20 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.… | |
| CVE-2026-91491 | CRITICAL | 9.8 | 2026-10-20 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 a… | |
| CVE-2026-91408 | CRITICAL | 9.8 | 2026-10-20 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are 12.2.1.4.0 an… |