|
cve-2026-18781
|
The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final... |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-16747
|
Improper Neutralization of Special Elements in Output Used by a Downstream Component |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-24 |
|
cve-2026-57739
|
acymailing acymailing Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-08-22 |
|
cve-2025-10164
|
lmsys sglang Improper Input Validation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-22 |
|
cve-2021-27691
|
Tenda g0_firmware Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-22 |
|
cve-2026-77806
|
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in Aug... |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-15 |
|
cve-2026-76904
|
GeoTools is an open source Java library that provides tools for geospatial data |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-14 |
|
cve-2026-61979
|
Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions. |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-10-24 |
|
cve-2026-15981
|
MiniOrange saml_sp_single_sign_on Improper Authentication |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-21 |
|
cve-2026-15039
|
Unrestricted Upload of File with Dangerous Type |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-21 |
|
cve-2026-77647
|
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in Aug... |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-15780
|
VeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-20 |
|
cve-2022-0995
|
Linux Kernel Out-of-Bounds Write Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-20 |
|
cve-2021-23758
|
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-08-20 |
|
cve-2015-5287
|
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-20 |
|
cve-2015-3246
|
Red Hat Libuser Race Condition Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-20 |
|
cve-2026-66613
|
Improper Neutralization of Special Elements Used in a Template Engine |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-19 |
|
cve-2026-66582
|
Cozmoslabs translatepress Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-19 |
|
cve-2026-60004
|
Gitea Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-19 |
|
cve-2026-32475
|
elementor elementor_pro Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-19 |
|
cve-2026-19478
|
GitLab GitLab Improper Control of Generation of Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-19 |
|
cve-2026-73400
|
Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions. |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-10-22 |
|
cve-2026-73343
|
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-10-23 |
|
cve-2026-66629
|
Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions. |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-10-22 |
|
cve-2026-64849
|
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-25895
|
frangoteam fuxa Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-18 |
|
cve-2026-8452
|
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-08-17 |
|
cve-2026-73570
|
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-17 |
|
cve-2026-41679
|
paperclip paperclipai Improper Authentication |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-08-17 |
|
cve-2025-52907
|
TOTOLINK x6000r_firmware Improper Input Validation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-08-17 |
ndaal KEV