|
cve-2025-27222
|
rocketsoftware trufusion_enterprise Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-03-07 |
|
cve-2022-38296
|
cuppacms cuppacms Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-07 |
|
cve-2026-20128
|
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-05 |
|
cve-2026-20122
|
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-05 |
|
cve-2021-22681
|
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability |
CRITICAL
|
9.8
|
63.63%
|
cvelistv5 |
2026-03-05 |
|
cve-2017-7973
|
Schneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
1.47%
|
cvelistv5 |
2026-03-05 |
|
cve-2026-22719
|
Broadcom VMware Aria Operations Command Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-03 |
|
cve-2023-43000
|
Apple Multiple products Use-After-Free Vulnerability |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-03-03 |
|
cve-2023-41974
|
Apple iOS and iPadOS Use-After-Free Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-03 |
|
cve-2021-30952
|
Apple Multiple Products Integer Overflow or Wraparound Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-03 |
|
cve-2026-21385
|
Qualcomm Multiple Chipsets Memory Corruption Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-02 |
|
cve-2026-1492
|
WPEverest user_registration_\&_membership Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-02 |
|
cve-2026-1207
|
djangoproject django Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-26 |
|
cve-2025-26125
|
Exposed IOCTL with Insufficient Access Control |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2026-02-26 |
|
cve-2026-20127
|
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-25 |
|
cve-2024-3495
|
Country State City Dropdown CF7 ‘cnt’ and 'sid' SQL Injection |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-02-25 |
|
cve-2022-20775
|
Cisco SD-WAN Path Traversal Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-25 |
|
cve-2026-20931
|
Microsoft Windows External Control of File Name or Path |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-24 |
|
cve-2026-20029
|
Cisco Identity Services Engine Improper Restriction of XML External Entity Reference |
MEDIUM
|
4.9
|
N/A
|
cvelistv5 |
2026-02-24 |
|
cve-2025-14155
|
Leap13 premium_addons_for_elementor Missing Authorization |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-02-23 |
|
cve-2023-6895
|
Hikvision intercom_broadcast_system Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-23 |
|
cve-2025-68613
|
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability |
CRITICAL
|
9.9
|
N/A
|
cvelistv5 |
2026-02-21 |
|
cve-2026-27542
|
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2026-27541
|
WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability |
HIGH
|
7.2
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2026-27540
|
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability |
CRITICAL
|
9.0
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2026-1581
|
CVE-2026-1581 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2025-68461
|
roundcubemail: Roundcube Webmail: Cross-Site Scripting (XSS) vulnerability via crafted SVG animate tag |
MEDIUM
|
6.1
|
N/A
|
cvelistv5 |
2026-06-28 |
|
cve-2025-14528
|
D-Link dir-803_firmware Exposure of Sensitive Information to an Unauthorized Actor |
MEDIUM
|
5.5
|
N/A
|
cvelistv5 |
2026-02-20 |
|
cve-2024-6250
|
lollms lollms_web_ui Absolute Path Traversal |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-02-20 |
|
cve-2026-25253
|
openclaw openclaw Incorrect Resource Transfer Between Spheres |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-19 |
ndaal KEV