Search
37,428 CVEs · Critical severity
CVEs (37,428, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 126–150 of 37,428 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-20043 | CRITICAL | 9.0 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive… | |
| CVE-2026-113788 | CRITICAL | Patched | — | 2026-10-21 | Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh` service in Lagoon core that would allow an attacker to… |
| CVE-2026-111852 | CRITICAL | 9.3 | 2026-10-21 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.… | |
| CVE-2026-111834 | CRITICAL | 9.9 | 2026-10-21 | Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board … | |
| CVE-2026-111832 | CRITICAL | 10.0 | 2026-10-21 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailste… | |
| CVE-2026-109619 | CRITICAL | Patched | 8.1 | 2026-10-21 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being rese… |
| CVE-2026-109618 | CRITICAL | Patched | 9.8 | 2026-10-21 | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario an… |
| CVE-2026-114403 | CRITICAL | 8.1 | 2026-10-21 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted… | |
| CVE-2026-87095 | CRITICAL | 9.1 | 2026-10-21 | Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build… | |
| CVE-2026-71195 | CRITICAL | Patched | 9.9 | 2026-10-21 | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations ag… |
| CVE-2026-113744 | CRITICAL | 10.0 | 2026-10-21 | A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the comp… | |
| CVE-2026-114119 | CRITICAL | Patched | 9.8 | 2026-10-21 | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be cha… |
| CVE-2026-114108 | CRITICAL | Patched | 9.8 | 2026-10-21 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requi… |
| CVE-2026-114087 | CRITICAL | Patched | 8.1 | 2026-10-21 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded… |
| CVE-2026-114053 | CRITICAL | Patched | 8.1 | 2026-10-21 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which re… |
| CVE-2026-92559 | CRITICAL | 9.8 | 2026-10-20 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address. | |
| CVE-2026-91665 | CRITICAL | 9.8 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attac… | |
| CVE-2026-91663 | CRITICAL | 9.9 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attack… | |
| CVE-2026-91658 | CRITICAL | 9.9 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attack… | |
| CVE-2026-91656 | CRITICAL | 9.1 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privi… | |
| CVE-2026-91655 | CRITICAL | 9.1 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attack… | |
| CVE-2026-91644 | CRITICAL | 9.3 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attac… | |
| CVE-2026-91638 | CRITICAL | 9.9 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attack… | |
| CVE-2026-91637 | CRITICAL | 9.9 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attack… | |
| CVE-2026-91624 | CRITICAL | 9.1 | 2026-10-20 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version t… |