CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
229687 CVEs matched. Showing 1301–1350 (page 27 of 4594).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-96881 |
TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization | MEDIUM | 6.9 | — | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96880 |
TaleLin lin-cms-spring-boot book Endpoint BookController.java getBook improper authorization | MEDIUM | 6.9 | — | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-97056 |
SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass | HIGH | 7.6 | — | — | VulnCheck | 2026-09-24 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-97055 |
SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret | CRITICAL | 9.2 | — | — | VulnCheck | 2026-09-24 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-96810 |
huanzi-qch base-admin Add User CommonController.java save cross site scripting | MEDIUM | 5.1 | — | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96803 |
java110 MicroCommunity fallBack API Endpoint BusinessApi.java QueryServiceSMOImpl.fallBack sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-18467 |
Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-rol… | CRITICAL | 9.8 | 9.8 | — | Wordfence | 2026-09-24 | 1 | ⚠ Threat | raw · ⬇ |
CVE-2026-96777 |
Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96774 |
SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosu… | MEDIUM | 6.9 | 5.3 | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96773 |
Intelliants Subrion CMS Login Page login.php authorize redirect | MEDIUM | 5.3 | 4.3 | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96772 |
Intelliants Subrion CMS actions.json assign-owner information disclosure | MEDIUM | 6.9 | 5.3 | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96764 |
kvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources | MEDIUM | 5.3 | 4.3 | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96763 |
kvcache-ai mooncake MountSegment Request Processing segment.cpp access control | MEDIUM | 5.3 | 5.4 | — | VulDB | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88388 |
CVE-2026-88388 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88369 |
CVE-2026-88369 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-52001 |
CVE-2026-52001 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88367 |
CVE-2026-88367 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-51996 |
CVE-2026-51996 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88357 |
CVE-2026-88357 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88360 |
CVE-2026-88360 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88355 |
CVE-2026-88355 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88351 |
CVE-2026-88351 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88378 |
CVE-2026-88378 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88385 |
CVE-2026-88385 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88377 |
CVE-2026-88377 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88370 |
CVE-2026-88370 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88359 |
CVE-2026-88359 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88365 |
CVE-2026-88365 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88376 |
CVE-2026-88376 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88358 |
CVE-2026-88358 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-51997 |
CVE-2026-51997 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-51995 |
CVE-2026-51995 | — | — | 7.5 | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88382 |
CVE-2026-88382 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88384 |
CVE-2026-88384 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88372 |
CVE-2026-88372 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88383 |
CVE-2026-88383 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88371 |
CVE-2026-88371 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88361 |
CVE-2026-88361 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88390 |
CVE-2026-88390 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88366 |
CVE-2026-88366 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88362 |
CVE-2026-88362 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88373 |
CVE-2026-88373 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88387 |
CVE-2026-88387 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88386 |
CVE-2026-88386 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-88368 |
CVE-2026-88368 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-51994 |
CVE-2026-51994 | — | — | — | — | mitre | 2026-09-24 | 10 | — | raw · ⬇ |
CVE-2026-96762 |
kvcache-ai mooncake RPC Path UnmountSegment authorization | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-82370 |
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service | HIGH | 8.6 | — | — | brocade | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-96751 |
pmTicket Project-Management-Software add_project.php setSync sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96739 |
SEMCMS KindEditor Upload upload_json.php cross site scripting | MEDIUM | 5.3 | 4.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |