CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
229687 CVEs matched. Showing 1351–1400 (page 28 of 4594).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-89078 |
Double Free in GitLab | CRITICAL | 9.9 | — | — | GitLab | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-92530 |
Use of Less Trusted Source in GitLab | MEDIUM | 4.3 | 4.3 | — | GitLab | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-92470 |
Missing Authorization in GitLab | HIGH | 7.7 | 7.7 | — | GitLab | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-92529 |
Incorrect Authorization in GitLab | MEDIUM | 4.3 | 4.3 | — | GitLab | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-92874 |
Incorrect Authorization in GitLab | MEDIUM | 5.4 | 5.4 | — | GitLab | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-92628 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab | LOW | 3.1 | 3.1 | — | GitLab | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-93577 |
Integer Overflow or Wraparound in GitLab | CRITICAL | 9.9 | 9.9 | — | GitLab | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-96680 |
ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization | MEDIUM | 5.3 | 4.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96678 |
weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversal | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96676 |
Fast FAC1900R uhttpd get_alias_name stack-based overflow | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96606 |
LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure | MEDIUM | 6.9 | 5.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-59980 |
hpack: Unbounded variable integer decoding can cause run-away computation on malformed input | MEDIUM | 6.3 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96604 |
SoftNews Media Group DataLife Engine Search search.php strip_data sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96603 |
Abdurrab5 online-makeup-store Admin functions.php confirm_user authorization | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-81537 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-81536 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 7.7 | 7.7 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-81208 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 7.7 | 7.7 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-93352 |
Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload | CRITICAL | 9.3 | 9.8 | — | VulnCheck | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-80423 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-86583 |
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Charac… | HIGH | 8.8 | 8.8 | — | Wordfence | 2026-09-23 | 1 | ⚠ Threat | raw · ⬇ |
CVE-2026-19125 |
EthPress <= 2.3.5 - Unauthenticated Authentication Bypass | HIGH | 8.1 | 8.1 | — | Wordfence | 2026-09-23 | 1 | ⚠ Threat | raw · ⬇ |
CVE-2026-75887 |
Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler | HIGH | 7.5 | 7.5 | — | redhat | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-96602 |
Abdurrab5 online-makeup-store Customer Login customerSignin.php sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-96601 |
Abdurrab5 online-makeup-store Admin Login index.php sql injection | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-80425 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-80412 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-80379 |
DataStage on Cloud Pak for Data has several vulnerabilities | HIGH | 8.8 | 8.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-6935 |
Multiple Vulnerabilities in IBM Concert Software | HIGH | 7.8 | 7.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-6928 |
Multiple Vulnerabilities in IBM Concert Software | CRITICAL | 9.8 | 9.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-6925 |
Multiple Vulnerabilities in IBM Concert Software | MEDIUM | 5.3 | 5.3 | — | ibm | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-6794 |
Multiple Vulnerabilities in IBM Concert Software | HIGH | 7.8 | 7.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-67221 |
RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords | MEDIUM | 5.9 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-75886 |
Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token fo… | HIGH | 7.2 | 7.2 | — | redhat | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-67231 |
RabbitMQ: Trust-store whitelist by Issuer+Serial only | CRITICAL | 9.1 | — | — | GitHub_M | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-67218 |
RabbitMQ: Super-stream HTTP creation skips configure-permission check | LOW | 2.1 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-6730 |
Multiple Vulnerabilities in IBM Concert Software | CRITICAL | 9.8 | 9.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-6721 |
Multiple Vulnerabilities in IBM Concert Software | CRITICAL | 9.8 | 9.8 | — | ibm | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-66074 |
RabbitMQ: ReDoS via management API ?name= filter | MEDIUM | 6.0 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-82369 |
Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a | HIGH | 8.6 | — | — | brocade | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-6718 |
Multiple Vulnerabilities in IBM Concert Software | MEDIUM | 6.2 | 6.2 | — | ibm | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-67232 |
RabbitMQ: Web-MQTT decompression bomb | HIGH | 8.2 | — | — | GitHub_M | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-67405 |
RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation) | MEDIUM | 5.3 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-66075 |
RabbitMQ: Monitoring-tag user can restart federation links | LOW | 2.3 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-67219 |
RabbitMQ: Consistent-hash exchange unbounded weight | MEDIUM | 6.0 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-67228 |
RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component | MEDIUM | 6.9 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-67235 |
RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size | HIGH | 7.1 | — | — | GitHub_M | 2026-09-23 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-66068 |
RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs | MEDIUM | 5.6 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-67229 |
RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata | MEDIUM | 6.9 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-66080 |
RabbitMQ: Super-stream partitions unbounded allocation | MEDIUM | 5.9 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |
CVE-2026-67240 |
RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard | LOW | 2.3 | — | — | GitHub_M | 2026-09-23 | 10 | — | raw · ⬇ |