Search
6,516 CVEs · High severity
CVEs (6,516, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 6,516 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111812 | HIGH | Patched | 10.0 | 2026-10-21 | Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials. This issue affect… |
| CVE-2026-111814 | HIGH | Patched | 10.0 | 2026-10-21 | Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for a transaction configured to pre… |
| CVE-2026-111815 | HIGH | Patched | 10.0 | 2026-10-21 | Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verify_client STRICT policy… |
| CVE-2026-114268 | HIGH | 9.9 | 2026-10-21 | A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of … | |
| CVE-2026-113506 | HIGH | 9.9 | 2026-10-20 | A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The… | |
| CVE-2026-113390 | HIGH | 9.9 | 2026-10-20 | A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CG… | |
| CVE-2026-113391 | HIGH | 9.9 | 2026-10-20 | A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Uplo… | |
| CVE-2026-113389 | HIGH | 9.9 | 2026-10-20 | A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of t… | |
| CVE-2026-112371 | HIGH | 9.9 | 2026-10-19 | A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation… | |
| CVE-2026-112370 | HIGH | 9.9 | 2026-10-19 | A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os comman… | |
| CVE-2026-109157 | HIGH | 9.9 | 2026-10-13 | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a man… | |
| CVE-2026-109108 | HIGH | 9.9 | 2026-10-13 | A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the arg… | |
| CVE-2026-108915 | HIGH | 9.9 | 2026-10-12 | A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffe… | |
| CVE-2026-108914 | HIGH | 9.9 | 2026-10-12 | A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument… | |
| CVE-2026-108895 | HIGH | 9.9 | 2026-10-12 | A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argumen… | |
| CVE-2026-108896 | HIGH | 9.9 | 2026-10-12 | A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_p… | |
| CVE-2026-108893 | HIGH | 9.9 | 2026-10-12 | A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vl… | |
| CVE-2026-108894 | HIGH | 9.9 | 2026-10-12 | A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route H… | |
| CVE-2026-108540 | HIGH | 9.9 | 2026-10-11 | A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulati… | |
| CVE-2026-105778 | HIGH | 9.9 | 2026-10-06 | A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handl… | |
| CVE-2026-113736 | HIGH | 9.8 | 2026-10-21 | A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the comp… | |
| CVE-2026-87684 | HIGH | Patched | 9.8 | 2026-10-08 | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, … |
| CVE-2026-87659 | HIGH | Patched | 9.8 | 2026-10-08 | A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fa… |
| CVE-2026-97162 | HIGH | Patched | 9.8 | 2026-09-26 | Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
| CVE-2026-108971 | HIGH | 9.6 | 2026-10-13 | A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. E… |