CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
229687 CVEs matched. Showing 1901–1950 (page 39 of 4594).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-83801 |
Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text | MEDIUM | 5.4 | 5.4 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-63104 |
Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint | HIGH | 7.2 | 8.1 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-47116 |
LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH | CRITICAL | 9.3 | 9.8 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-94574 |
CVE-2026-94574 | — | — | — | — | certcc | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-89281 |
CVE-2026-89281 | — | — | — | — | certcc | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-89282 |
CVE-2026-89282 | — | — | — | — | certcc | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-62985 |
request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error')… | HIGH | 7.5 | 7.5 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-28325 |
SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability | HIGH | 8.8 | 8.8 | — | SolarWinds | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76717 |
Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (A… | MEDIUM | 5.3 | 5.3 | — | hpe | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-76716 |
Unauthenticated Remote Unauthorized Access and Denial of Service Vulnerabilities in HPE Networking Analytics and Locatio… | MEDIUM | 5.3 | 5.3 | — | hpe | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-76715 |
Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Lo… | HIGH | 7.1 | 7.1 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76714 |
Authenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engi… | HIGH | 7.2 | 7.2 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76713 |
Authenticated Remote File System Access Vulnerability in HPE Networking Analytics and Location Engine (ALE) | HIGH | 7.2 | 7.2 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76712 |
Unauthenticated Remote Unauthorized Access, Information Disclosure, and Denial of Service Vulnerabilities in HPE Network… | HIGH | 7.3 | 7.3 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76711 |
Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE) | HIGH | 7.5 | 7.5 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76710 |
Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (A… | HIGH | 7.5 | 7.5 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76709 |
Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE) | CRITICAL | 9.8 | 9.8 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-76708 |
Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE) | CRITICAL | 9.8 | 9.8 | — | hpe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-59991 |
psd-tools: Uncontrolled memory allocation in psd-tools composite/numpy via crafted PSD geometry | HIGH | 7.5 | 7.5 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-28324 |
SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability | CRITICAL | 9.8 | 9.8 | — | SolarWinds | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-63628 |
mppx: Gas Draining with access list | MEDIUM | 6.9 | — | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-63627 |
mppx: Gas Draining with padding | MEDIUM | 6.9 | — | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-91129 |
Home Assistant: mDNS Server-Side Request Forgery | MEDIUM | 5.4 | 5.4 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-91130 |
Home Assistant: XSS in Statistics Graph Card | CRITICAL | 9.3 | — | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-57149 |
plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection | CRITICAL | 9.9 | 9.9 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-63386 |
js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input | MEDIUM | 5.3 | 5.3 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-77399 |
icalendar: Denial of service via unbounded VALARM REPEAT expansion | MEDIUM | 6.5 | 6.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-84395 |
Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918) | HIGH | 7.1 | 7.1 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83963 |
Substance3D - Modeler | Out-of-bounds Write (CWE-787) | HIGH | 7.8 | 7.8 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-81998 |
Substance3D - Modeler | Out-of-bounds Write (CWE-787) | HIGH | 7.8 | 7.8 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83962 |
Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121) | HIGH | 7.8 | 7.8 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-79906 |
Substance3D - Modeler | Out-of-bounds Write (CWE-787) | HIGH | 7.8 | 7.8 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-94462 |
Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) | HIGH | 7.1 | 7.1 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75743 |
Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352) | HIGH | 7.1 | 7.1 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75745 |
Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82000 |
Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL | 9.6 | 9.6 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75744 |
Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79) | HIGH | 8.1 | 8.1 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-81995 |
Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20) | CRITICAL | 9.1 | 9.1 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-81999 |
Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918) | HIGH | 8.7 | 8.7 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75689 |
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) | CRITICAL | 9.3 | 9.3 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83964 |
Adobe Connect | Improper Certificate Validation (CWE-295) | MEDIUM | 6.2 | 6.2 | — | adobe | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-34689 |
Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | HIGH | 8.6 | 8.6 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75686 |
Adobe Connect | Improper Input Validation (CWE-20) | CRITICAL | 9.3 | 9.3 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75682 |
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL | 9.9 | 9.9 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48361 |
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM | 6.1 | 6.1 | — | adobe | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-75698 |
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) | CRITICAL | 9.3 | 9.3 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75684 |
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) | CRITICAL | 9.3 | 9.3 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75697 |
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) | CRITICAL | 9.3 | 9.3 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75658 |
Bridge | Out-of-bounds Write (CWE-787) | HIGH | 7.8 | 7.8 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75656 |
Bridge | Out-of-bounds Read (CWE-125) | MEDIUM | 5.5 | 5.5 | — | adobe | 2026-09-22 | 10 | — | raw · ⬇ |