Search
16,950 CVEs
CVEs (16,950, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 176–200 of 16,950 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108929 | CRITICAL | 9.9 | 2026-10-12 | A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulati… | |
| CVE-2026-96012 | CRITICAL | 9.9 | 2026-10-12 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorizati… | |
| CVE-2026-77366 | CRITICAL | 9.9 | 2026-10-12 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault v… | |
| CVE-2026-108915 | HIGH | 9.9 | 2026-10-12 | A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffe… | |
| CVE-2026-108914 | HIGH | 9.9 | 2026-10-12 | A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument… | |
| CVE-2026-85955 | CRITICAL | Patched | 9.9 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation fun… |
| CVE-2026-85947 | CRITICAL | Patched | 9.9 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attack… |
| CVE-2026-85948 | CRITICAL | Patched | 9.9 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote… |
| CVE-2026-108895 | HIGH | 9.9 | 2026-10-12 | A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argumen… | |
| CVE-2026-108896 | HIGH | 9.9 | 2026-10-12 | A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_p… | |
| CVE-2026-108893 | HIGH | 9.9 | 2026-10-12 | A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vl… | |
| CVE-2026-108894 | HIGH | 9.9 | 2026-10-12 | A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route H… | |
| CVE-2026-108540 | HIGH | 9.9 | 2026-10-11 | A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulati… | |
| CVE-2026-62129 | CRITICAL | 9.9 | 2026-10-10 | Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions. | |
| CVE-2026-62024 | CRITICAL | 9.9 | 2026-10-10 | Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions. | |
| CVE-2026-108263 | CRITICAL | Patched | 9.9 | 2026-10-09 | Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run … |
| CVE-2026-94510 | CRITICAL | 9.9 | 2026-10-08 | Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-106126 | CRITICAL | 9.9 | 2026-10-08 | A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute ar… | |
| CVE-2026-79798 | CRITICAL | 9.9 | 2026-10-06 | SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL in… | |
| CVE-2026-67269 | CRITICAL | Patched | 9.9 | 2026-10-06 | Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resourc… |
| CVE-2026-39755 | CRITICAL | 9.9 | 2026-10-06 | Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions. | |
| CVE-2026-39757 | CRITICAL | 9.9 | 2026-10-06 | Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. | |
| CVE-2026-39759 | CRITICAL | 9.9 | 2026-10-06 | Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. | |
| CVE-2026-32568 | CRITICAL | 9.9 | 2026-10-06 | Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions. | |
| CVE-2026-105778 | HIGH | 9.9 | 2026-10-06 | A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handl… |