|
cve-2025-34291
|
Langflow Origin Validation Error Vulnerability |
CRITICAL
|
9.4
|
N/A
|
cvelistv5 |
2026-01-23 |
|
cve-2024-37079
|
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-01-23 |
|
cve-2024-2473
|
WPS Hide Login Plugin for WordPress Login Page Disclosure |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-01-23 |
|
cve-2020-11963
|
evenroute iqrouter_firmware Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
3.23%
|
cvelistv5 |
2026-01-23 |
|
cve-2026-24061
|
GNU InetUtils Argument Injection Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2026-23760
|
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-8829
|
Linksys re6250_firmware Improper Neutralization of Special Elements used in a Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-7544
|
Tenda ac1206_firmware Improper Restriction of Operations within the Bounds of a Memory Buffer |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-7407
|
NETGEAR d6400_firmware Improper Neutralization of Special Elements used in a Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-6485
|
TOTOLINK a3002r_firmware Improper Neutralization of Special Elements used in a Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-52691
|
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2024-12213
|
apusthemes superio Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2023-7335
|
Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2022-31208
|
Infiray cmd_string URL Parameter Arbitraty Command Execution |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2026-20045
|
Cisco Unified Communications Products Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-21 |
|
cve-2026-0920
|
la-studioweb element_kit_for_elementor Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-21 |
|
cve-2025-51683
|
mjobtime mjobtime Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-01-21 |
|
cve-2025-15521
|
kodezen academy_lms Authorization Bypass Through User-Controlled Key |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-21 |
|
cve-2021-27670
|
appspace appspace Server-Side Request Forgery |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-21 |
|
cve-2025-7417
|
Tenda o3_firmware Improper Restriction of Operations within the Bounds of a Memory Buffer |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2025-67953
|
bookingactivitiesteam booking_activities Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2025-2857
|
firefox: Firefox IPC sandbox escape on windows |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2025-26399
|
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2025-20282
|
Cisco Identity Services Engine Improper Privilege Management |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2025-11001
|
7zip: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability |
HIGH
|
7.0
|
N/A
|
cvelistv5 |
2026-03-26 |
|
cve-2025-0890
|
Zyxel vmg4325-b10a_firmware Improper Authentication |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2025-0683
|
Exposure of Private Personal Information to an Unauthorized Actor |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2025-0626
|
Hidden Functionality |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2024-6782
|
calibre-ebook calibre Incorrect Authorization |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2024-57040
|
TP-Link tl-wr845n_firmware Use of Hard-coded Credentials |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
ndaal KEV