Search
1,420 CVEs · High severity
CVEs (1,420, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 1,420 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97635 | HIGH | Patched | 8.1 | 2026-10-22 | The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface… |
| CVE-2026-97627 | HIGH | 7.2 | 2026-10-20 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrat… | |
| CVE-2026-97328 | HIGH | Patched | 7.5 | 2026-10-22 | The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser re-emits into element attributes when a non-default image delivery mode… |
| CVE-2026-97313 | HIGH | 7.5 | 2026-10-21 | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a deni… | |
| CVE-2026-97206 | HIGH | 7.5 | 2026-10-21 | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. … | |
| CVE-2026-96888 | HIGH | 7.5 | 2026-10-21 | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue… | |
| CVE-2026-96778 | HIGH | Patched | — | 2026-10-21 | Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an … |
| CVE-2026-96660 | HIGH | 7.2 | 2026-10-17 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPres… | |
| CVE-2026-96644 | HIGH | Patched | — | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src… |
| CVE-2026-96643 | HIGH | Patched | — | 2026-10-21 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Ex… |
| CVE-2026-96642 | HIGH | Patched | — | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that return… |
| CVE-2026-96640 | HIGH | Patched | — | 2026-10-21 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking du… |
| CVE-2026-96637 | HIGH | Patched | — | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size with… |
| CVE-2026-96616 | HIGH | 6.5 | 2026-10-22 | Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them … | |
| CVE-2026-96534 | HIGH | Patched | 7.7 | 2026-10-18 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before usi… |
| CVE-2026-96365 | HIGH | 7.5 | 2026-10-22 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12,… | |
| CVE-2026-96185 | HIGH | 7.5 | 2026-10-22 | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. | |
| CVE-2026-95713 | HIGH | 7.0 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to di… | |
| CVE-2026-95712 | HIGH | 7.1 | 2026-10-22 | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the… | |
| CVE-2026-95711 | HIGH | 7.1 | 2026-10-22 | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authenticatio… | |
| CVE-2026-95710 | HIGH | 7.1 | 2026-10-22 | An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduc… | |
| CVE-2026-95709 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command inject… | |
| CVE-2026-95708 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command inject… | |
| CVE-2026-95707 | HIGH | 7.2 | 2026-10-22 | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful… | |
| CVE-2026-95706 | HIGH | 7.2 | 2026-10-22 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Success… |