Search
151,644 CVEs · High severity
CVEs (151,644, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 201–225 of 151,644 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97910 | HIGH | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against fixed allocations sprd_platform_compr_open() alloca… | |
| CVE-2026-97903 | HIGH | 7.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to thread_pid across proc_flush_pid Commit 0a36bad01731 ("release_task: kill th… | |
| CVE-2026-97885 | HIGH | 7.3 | 2026-09-25 | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.p… | |
| CVE-2026-97883 | HIGH | 7.3 | 2026-09-25 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of th… | |
| CVE-2026-97882 | HIGH | 7.3 | 2026-09-25 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the… | |
| CVE-2026-97878 | HIGH | 7.3 | 2026-09-25 | A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such… | |
| CVE-2026-97877 | HIGH | 7.3 | 2026-09-25 | A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the compo… | |
| CVE-2026-97875 | HIGH | 8.1 | 2026-09-25 | Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project sour… | |
| CVE-2026-97871 | HIGH | 7.3 | 2026-09-25 | A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the com… | |
| CVE-2026-9787 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected … |
| CVE-2026-97865 | HIGH | 7.3 | 2026-09-25 | A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Que… | |
| CVE-2026-9786 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst… |
| CVE-2026-97851 | HIGH | 9.1 | 2026-10-16 | The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DEL… | |
| CVE-2026-9785 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
| CVE-2026-9784 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
| CVE-2026-97830 | HIGH | Patched | 7.5 | 2026-10-13 | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-9783 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
| CVE-2026-9782 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
| CVE-2026-97818 | HIGH | 8.6 | 2026-09-25 | phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php. | |
| CVE-2026-97812 | HIGH | Patched | 7.0 | 2026-10-13 | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97811 | HIGH | Patched | 7.8 | 2026-10-13 | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97810 | HIGH | Patched | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-9781 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst… |
| CVE-2026-97809 | HIGH | Patched | 7.8 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97808 | HIGH | Patched | 7.0 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |