|
cve-2026-23760
|
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability |
CRITICAL
|
N/A
|
96.43%
|
cvelistv5 |
2026-01-22 |
|
cve-2026-21509
|
Microsoft Office Security Feature Bypass Vulnerability |
HIGH
|
N/A
|
70.80%
|
cvelistv5 |
2026-01-26 |
|
cve-2025-52691
|
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability |
CRITICAL
|
10.0
|
85.66%
|
cvelistv5 |
2026-01-22 |
|
cve-2018-14634
|
Linux Kernel Integer Overflow Vulnerability |
HIGH
|
N/A
|
14.69%
|
cvelistv5 |
2026-01-26 |
|
cve-2024-37079
|
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability |
CRITICAL
|
9.8
|
22.38%
|
cvelistv5 |
2026-01-23 |
|
cve-2025-68645
|
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability |
HIGH
|
8.8
|
48.87%
|
cvelistv5 |
2026-01-14 |
|
cve-2025-54313
|
eslint-config-prettier: Eslint-config-prettier Supply Chain Compromise |
HIGH
|
7.5
|
5.12%
|
cvelistv5 |
2026-06-30 |
|
cve-2025-34026
|
Versa Concerto Improper Authentication Vulnerability |
HIGH
|
N/A
|
81.78%
|
cvelistv5 |
2025-06-07 |
|
cve-2025-31125
|
vite: Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query |
MEDIUM
|
5.3
|
74.94%
|
cvelistv5 |
2026-07-11 |
|
cve-2026-20045
|
Cisco Unified Communications Products Code Injection Vulnerability |
HIGH
|
N/A
|
4.54%
|
cvelistv5 |
2026-01-21 |
|
cve-2026-20805
|
Microsoft Windows Information Disclosure Vulnerability |
HIGH
|
N/A
|
7.46%
|
cvelistv5 |
2026-01-13 |
|
cve-2025-8110
|
SUSE CVE CVE-2025-8110 |
UNKNOWN
|
N/A
|
85.20%
|
cvelistv5 |
2026-07-28 |
|
cve-2025-37164
|
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability |
CRITICAL
|
10.0
|
90.19%
|
cvelistv5 |
2025-12-24 |
|
cve-2009-0556
|
Microsoft Office PowerPoint Code Injection Vulnerability |
HIGH
|
N/A
|
67.31%
|
cvelistv5 |
2009-04-03 |
|
cve-2025-14847
|
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability |
HIGH
|
8.7
|
83.22%
|
cvelistv5 |
2025-12-28 |
|
cve-2023-52163
|
Digiever DS-2105 Pro Missing Authorization Vulnerability |
HIGH
|
8.8
|
96.92%
|
cvelistv5 |
2024-12-19 |
|
cve-2025-14733
|
WatchGuard Firebox Out of Bounds Write Vulnerability |
CRITICAL
|
N/A
|
29.42%
|
cvelistv5 |
2025-12-19 |
|
cve-2025-59374
|
ASUS Live Update Embedded Malicious Code Vulnerability |
CRITICAL
|
9.3
|
1.20%
|
cvelistv5 |
2025-12-17 |
|
cve-2025-40602
|
SonicWall SMA1000 Missing Authorization Vulnerability |
CRITICAL
|
N/A
|
2.76%
|
cvelistv5 |
2025-12-17 |
|
cve-2025-20393
|
Cisco Multiple Products Improper Input Validation Vulnerability |
CRITICAL
|
10.0
|
32.39%
|
cvelistv5 |
2025-12-17 |
|
cve-2025-59718
|
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability |
CRITICAL
|
9.1
|
68.29%
|
cvelistv5 |
2025-12-15 |
|
cve-2025-43529
|
webkitgtk: webkitgtk: Use-after-free due to improper memory management |
HIGH
|
8.8
|
25.65%
|
cvelistv5 |
2026-06-30 |
|
cve-2025-14611
|
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability |
HIGH
|
7.1
|
53.30%
|
cvelistv5 |
2025-12-12 |
|
cve-2025-14174
|
Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page |
HIGH
|
8.8
|
55.33%
|
cvelistv5 |
2026-06-29 |
|
cve-2018-4063
|
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability |
HIGH
|
N/A
|
27.26%
|
cvelistv5 |
2025-12-11 |
|
cve-2025-58360
|
OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability |
HIGH
|
8.2
|
61.17%
|
cvelistv5 |
2025-12-05 |
|
cve-2025-62221
|
Microsoft Windows Use After Free Vulnerability |
HIGH
|
7.8
|
2.50%
|
cvelistv5 |
2025-12-09 |
|
cve-2025-6218
|
RARLAB WinRAR Path Traversal Vulnerability |
HIGH
|
N/A
|
90.48%
|
cvelistv5 |
2025-08-08 |
|
cve-2025-66644
|
Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025. |
HIGH
|
7.2
|
3.42%
|
cvelistv5 |
2026-06-17 |
|
cve-2022-37055
|
D-Link Routers Buffer Overflow Vulnerability |
CRITICAL
|
9.8
|
55.53%
|
cvelistv5 |
2024-05-24 |
ndaal KEV