|
cve-2024-12025
|
Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-31 |
|
cve-2024-11868
|
thimpress learnpress Improper Access Control |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-31 |
|
cve-2023-40600
|
ewww image_optimizer Exposure of Sensitive Information to an Unauthorized Actor |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-31 |
|
cve-2023-36899
|
Microsoft .NET Framework Improper Input Validation |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-03-31 |
|
cve-2022-1453
|
carrcommunications rsvpmaker Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-31 |
|
cve-2026-35056
|
xenforo xenforo Improper Control of Generation of Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-30 |
|
cve-2025-66744
|
Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-30 |
|
cve-2026-3055
|
Citrix NetScaler Out-of-Bounds Read Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-29 |
|
cve-2026-21643
|
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-53521
|
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-03-27 |
|
cve-2026-4001
|
Improper Neutralization of Directives in Dynamically Evaluated Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-24 |
|
cve-2023-47253
|
Qualitor qualitor Improper Neutralization of Special Elements used in a Command |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-03-24 |
|
cve-2026-33634
|
Aquasecurity Trivy Embedded Malicious Code Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-23 |
|
cve-2026-32562
|
passwordprotectwp password_protect_wordpress Missing Authorization |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-23 |
|
cve-2020-9374
|
TP-Link tl-wr849n_firmware Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
42.67%
|
cvelistv5 |
2026-03-23 |
|
cve-2020-5284
|
zeit next.js Relative Path Traversal |
HIGH
|
N/A
|
44.78%
|
cvelistv5 |
2026-03-23 |
|
cve-2014-6321
|
Microsoft Windows Improper Control of Generation of Code |
HIGH
|
N/A
|
95.99%
|
cvelistv5 |
2026-03-23 |
|
cve-2026-3584
|
kaliforms contact_form_builder Improper Control of Generation of Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-20 |
|
cve-2026-32499
|
QuantumCloud wpbot Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-20 |
|
cve-2026-21992
|
Oracle identity_manager Missing Authentication for Critical Functionality |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-20 |
|
cve-2026-33017
|
Langflow Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-19 |
|
cve-2026-27944
|
nginxui nginx_ui Missing Authentication for Critical Functionality |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-19 |
|
cve-2025-32975
|
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-19 |
|
cve-2026-20963
|
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-18 |
|
cve-2026-20131
|
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2026-03-18 |
|
cve-2025-43520
|
Apple Multiple Products Classic Buffer Overflow Vulnerability |
MEDIUM
|
5.5
|
N/A
|
cvelistv5 |
2026-03-18 |
|
cve-2025-43510
|
Apple Multiple Products Improper Locking Vulnerability |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-03-18 |
|
cve-2025-31277
|
Apple Multiple Products Buffer Overflow Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-18 |
|
cve-2026-3564
|
ConnectWise ScreenConnect Improper Verification of Cryptographic Signature |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-17 |
|
cve-2026-25306
|
8theme XStore Core Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-17 |
ndaal KEV