CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
229687 CVEs matched. Showing 2001–2050 (page 41 of 4594).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-18462 |
Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allow… | HIGH | 7.3 | — | — | RTI | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18461 |
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format Stri… | CRITICAL | 9.2 | — | — | RTI | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18460 |
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers… | MEDIUM | 6.9 | — | — | RTI | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-18459 |
Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. | HIGH | 8.7 | — | — | RTI | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18458 |
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type … | MEDIUM | 6.8 | — | — | RTI | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-18457 |
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. | HIGH | 8.3 | — | — | RTI | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-11389 |
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type … | MEDIUM | 6.8 | — | — | RTI | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-11388 |
Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. | MEDIUM | 6.9 | — | — | RTI | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-8849 |
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. | HIGH | 7.7 | — | — | RTI | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-7866 |
Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. | CRITICAL | 10.0 | — | — | RTI | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77244 |
[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token | CRITICAL | 10.0 | 10.0 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77265 |
MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow | MEDIUM | 5.9 | 5.9 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-77270 |
MCP Atlassian: Arbitrary File Read via Upload Attachment Tools | MEDIUM | 6.5 | 6.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95657 |
dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting | MEDIUM | 5.1 | 3.5 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-75703 |
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-84412 |
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-89276 |
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL | 9.9 | 9.9 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83660 |
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL | 9.9 | 9.9 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82013 |
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL | 9.9 | 9.9 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82003 |
Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20) | HIGH | 8.5 | 8.5 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82009 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE… | CRITICAL | 9.1 | 9.1 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75721 |
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75723 |
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75699 |
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-73369 |
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82011 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE… | CRITICAL | 9.1 | 9.1 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82443 |
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL | 9.6 | 9.6 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82008 |
Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20) | CRITICAL | 9.9 | 9.9 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-89275 |
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-75728 |
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL | 9.1 | 9.1 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-82010 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE… | CRITICAL | 9.9 | 9.9 | — | adobe | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77258 |
MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path() | HIGH | 7.7 | 7.7 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77274 |
MCP Atlassian: SSRF Protection Bypass | HIGH | 8.8 | — | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95624 |
Tauri framework v2 malicious downgrade via allow_downgrades from frontend code | MEDIUM | 6.8 | 6.8 | — | JFROG | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95656 |
dgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-85995 |
Notepad++: Authenticode verification bypass allows modified updater execution | HIGH | 7.3 | 7.3 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-86056 |
Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS) | MEDIUM | 5.5 | 5.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-77605 |
Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution) | HIGH | 7.8 | 7.8 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-86054 |
Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session path | HIGH | 7.8 | 7.8 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-85288 |
Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog | MEDIUM | 6.7 | 6.7 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-85279 |
Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value | HIGH | 8.6 | 8.6 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-93345 |
MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI | HIGH | 8.7 | 7.5 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-94384 |
Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda | MEDIUM | 6.4 | 8.1 | — | AMZN | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-83597 |
Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution | HIGH | 7.0 | 7.0 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83600 |
Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent | MEDIUM | 6.5 | 6.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-83598 |
Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair | HIGH | 7.8 | 7.8 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83603 |
Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE | HIGH | 8.4 | 8.4 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-83601 |
Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write | MEDIUM | 6.5 | 6.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-83602 |
Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK | MEDIUM | 6.5 | 6.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-83599 |
Netdata: WebSocket Decompression Bomb | HIGH | 7.5 | 7.5 | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |