CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
228874 CVEs matched. Showing 1001–1050 (page 21 of 4578).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-77765 |
Better Payment < 2.3.4 - Unauthenticated Payment Amount Manipulation | — | — | 5.3 | — | WPScan | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-75799 |
YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache | — | — | 9.0 | — | WPScan | 2026-09-23 | 20 | ⚠ Threat | raw · ⬇ |
CVE-2026-18365 |
Zportals < 6.4.2 - Subscriber+ User Email Disclosure | — | — | 4.3 | — | WPScan | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-18364 |
Zportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings Update | — | — | 4.3 | — | WPScan | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-16264 |
Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR | — | — | 6.5 | — | WPScan | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-14321 |
Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing | — | — | 8.2 | — | WPScan | 2026-09-23 | 20 | ⚠ Threat | raw · ⬇ |
CVE-2025-15696 |
Real3D Flipbook Lite < 5.4 - Author+ Stored XSS | — | — | 6.8 | — | WPScan | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-86785 |
Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update | — | — | 5.3 | — | WPScan | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-19438 |
Mint Workbench I Path traversal Vulnerability | HIGH | 8.2 | 7.5 | — | ABB | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-96258 |
onSite internet GmbH Auktion NG Auktionssoftware Public Password Reset Endpoint forgotpasswd.html cross site scripting | MEDIUM | 5.3 | 4.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96257 |
Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow | CRITICAL | 10.0 | 10.0 | — | VulDB | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95958 |
JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow | MEDIUM | 4.8 | 3.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95957 |
SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student_signup.php prepend cross site scri… | MEDIUM | 5.3 | 4.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-91777 |
jackson-databind: quadratic forward-reference completion in Collection and Map deserializers | HIGH | 7.5 | 7.5 | — | HeroDevs | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-91776 |
jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID | HIGH | 7.5 | 7.5 | — | HeroDevs | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95930 |
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-89425 |
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded Strin… | HIGH | 7.5 | 7.5 | — | HeroDevs | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95929 |
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95928 |
recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization | MEDIUM | 5.1 | 5.5 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95927 |
SourceCodester Online Reviewer Management System exam-delete.php sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95926 |
SourceCodester Online Reviewer Management System btn_functions.php update sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95925 |
SourceCodester Online Reviewer Management System btn_functions.php update sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95924 |
SourceCodester Online Reviewer Management System btn_functions.php add sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95897 |
Dask Loader core.py from_npy_stack deserialization | MEDIUM | 5.1 | 5.5 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96273 |
Ghidra before 12.1.4 Denial of Service via Crafted Database | MEDIUM | 6.8 | 5.5 | — | VulnCheck | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96272 |
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php | HIGH | 8.7 | 7.5 | — | VulnCheck | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-96271 |
Photoview through 2.4.0 Authorization Bypass via shareAlbum | HIGH | 7.1 | 7.1 | — | VulnCheck | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95868 |
AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-79306 |
CVE-2026-79306 | MEDIUM | 6.5 | 6.5 | — | mitre | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-79310 |
CVE-2026-79310 | — | — | 8.5 | — | mitre | 2026-09-23 | 20 | ⚠ Threat | raw · ⬇ |
CVE-2026-79304 |
CVE-2026-79304 | MEDIUM | 6.5 | 6.5 | — | mitre | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2025-63564 |
CVE-2025-63564 | — | — | — | — | mitre | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-95833 |
itsourcecode Leave Management System index.php sql injection | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95830 |
theRealSain Pixtream post_upload.php unrestricted upload | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95829 |
TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy s… | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-94367 |
CVE-2026-94367 | HIGH | 7.2 | 7.2 | — | Securifera | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-92930 |
CVE-2026-92930 | MEDIUM | 6.2 | 6.2 | — | Securifera | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-92929 |
CVE-2026-92929 | MEDIUM | 5.3 | 5.3 | — | Securifera | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-92928 |
CVE-2026-92928 | MEDIUM | 6.5 | 6.5 | — | Securifera | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-61685 |
ReactPress has SQL injection via dynamic column names in TypeORM query builders | HIGH | 7.5 | 7.5 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-57576 |
plone.app.dexterity and plone.app.contenttypes have a Denial of Service due to excessive title or description length | MEDIUM | 6.5 | 6.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95828 |
Mstfakts College-Management-System Authentication server.php session_start session fixiation | MEDIUM | 5.3 | 4.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95820 |
anirbandutta9 College-Notes-Gallery userprofile.php admin1 unrestricted upload | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-18176 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 7.4 | 7.4 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18173 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | LOW | 3.7 | 3.7 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-18172 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | HIGH | 7.4 | 7.4 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18169 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | CRITICAL | 9.9 | 9.9 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18170 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | MEDIUM | 6.5 | 6.5 | — | ibm | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-18163 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | CRITICAL | 9.8 | 9.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18162 |
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities | CRITICAL | 9.8 | 9.8 | — | ibm | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |