|
cve-2026-18366
|
pixelite events_manager Improper Privilege Management |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-15369
|
Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-2614
|
mlflow: mlflow: Arbitrary file read via bypassed source path validation |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-0768
|
Langflow Langflow Improper Control of Generation of Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-29 |
|
cve-2026-82078
|
PaperCut NG/MF Unsafe Reflection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-81578
|
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-28 |
|
cve-2026-78003
|
Server-Side Request Forgery |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-28 |
|
cve-2026-32566
|
Incorrect Privilege Assignment |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-28 |
|
cve-2026-16759
|
Themeum tutor_lms Improper Neutralization of Special Elements in Output Used by a Downstream Component |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-28 |
|
cve-2026-76581
|
Improper Verification of Cryptographic Signature |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-74233
|
Improper Neutralization of Special Elements used in an OS Command |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-74232
|
Channel Accessible by Non-Endpoint |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-66384
|
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-61511
|
vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-53362
|
Linux Kernel Unspecified Vulnerability |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-49869
|
Kestra is an open-source, event-driven orchestration platform |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-10-25 |
|
cve-2026-46331
|
kernel: net/sched: act_pedit: extend the writable skb range per key |
MEDIUM
|
6.7
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-43494
|
In the Linux kernel, the following vulnerability has been resolved:
net/rds: reset op_nents when zerocopy page pin f... |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-10-19 |
|
cve-2026-36425
|
Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-26 |
|
cve-2026-31635
|
SUSE CVE CVE-2026-31635 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-08-06 |
|
cve-2023-49105
|
ownCloud Improper Authentication Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2023-34132
|
SonicWall analytics Use of Password Hash Instead of Password for Authentication |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-26 |
|
cve-2026-77136
|
Improper Neutralization of Special Elements Used in a Template Engine |
CRITICAL
|
9.5
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2026-66066
|
SUSE CVE CVE-2026-66066 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-10-10 |
|
cve-2026-63520
|
Microsoft SharePoint Improper Input Validation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2026-19632
|
Weak Password Recovery Mechanism for Forgotten Password |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2026-18963
|
keycloak-services: keycloak-services: Unauthenticated account takeover via reset-credentials flow bypass |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-08-20 |
|
cve-2026-32558
|
Incorrect Privilege Assignment |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-24 |
|
cve-2026-28167
|
super_forms super_forms Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-24 |
|
cve-2026-18781
|
Improper Control of Generation of Code |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-08-24 |
ndaal KEV