CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
229687 CVEs matched. Showing 2101–2150 (page 43 of 4594).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-77621 |
Vector: Arbitrary file write in the file sink via templated path (path traversal). | CRITICAL | 9.3 | — | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-80145 |
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password | CRITICAL | 9.4 | 9.1 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77620 |
Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and de… | HIGH | 8.7 | — | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-80144 |
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write | CRITICAL | 9.4 | 9.9 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-80143 |
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read | CRITICAL | 9.4 | 9.9 | — | VulnCheck | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-77619 |
Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation. | HIGH | 8.7 | — | — | GitHub_M | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-81883 |
radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode | LOW | 3.3 | 3.3 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-81885 |
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser | MEDIUM | 5.5 | 5.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-81882 |
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser | LOW | 3.3 | 3.3 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-81886 |
radare2: Uncontrolled memory allocation in radare2 dmp64 parser | MEDIUM | 5.5 | 5.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-81884 |
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser | LOW | 2.5 | 2.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-81880 |
radare2: Uncontrolled resource consumption in radare2 PEF loader | MEDIUM | 5.5 | 5.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95806 |
MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths | HIGH | 7.7 | — | — | CIRCL | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-81879 |
radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling | MEDIUM | 5.5 | 5.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-81878 |
radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser | MEDIUM | 5.5 | 5.5 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-81881 |
radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser | LOW | 3.3 | 3.3 | — | GitHub_M | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95805 |
MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction | MEDIUM | 5.3 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-19915 |
HP Support Assistant - Local Escalation of Privilege | HIGH | 7.3 | — | — | hp | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95754 |
MISP: Disabled-user check ineffective in pre-authentication TOTP login branch | MEDIUM | 6.9 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-89407 |
jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS | HIGH | 7.5 | 7.5 | — | HeroDevs | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-95703 |
MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name | MEDIUM | 5.1 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95701 |
MISP Path Traversal via Organization Name in Org-Statistics Logo Check | MEDIUM | 5.1 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95698 |
MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name | MEDIUM | 5.3 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95697 |
MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata | MEDIUM | 5.3 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95501 |
mtrano APENCMS Template weasel.php eval code injection | MEDIUM | 4.8 | 4.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95693 |
MISP Information Disclosure via Forged Upload Path | MEDIUM | 5.3 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-94127 |
BIG-IP APM OAuth vulnerability | CRITICAL | 9.3 | 9.8 | — | f5 | 2026-09-22 | 1 | ⚠ Threat | raw · ⬇ |
CVE-2026-95500 |
JosephChuks php-file-manager-with-code-editor Save codeEditor.php file_put_contents unrestricted upload | MEDIUM | 6.9 | 7.3 | — | VulDB | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-94570 |
CVE-2026-94570 | — | — | 5.9 | — | certcc | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-95685 |
MISP Missing Authorization on replaceSuggestionInReport Event Report Action | MEDIUM | 5.3 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-84388 |
CVE-2026-84388 | CRITICAL | 9.1 | 9.6 | — | fortinet | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65112 |
CVE-2026-65112 | MEDIUM | 6.5 | 6.5 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65118 |
CVE-2026-65118 | HIGH | 7.5 | 7.5 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65117 |
CVE-2026-65117 | MEDIUM | 5.0 | 5.0 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65115 |
CVE-2026-65115 | MEDIUM | 6.5 | 6.5 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65114 |
CVE-2026-65114 | HIGH | 8.3 | 8.3 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65113 |
CVE-2026-65113 | CRITICAL | 9.8 | 9.8 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65130 |
CVE-2026-65130 | HIGH | 8.0 | 8.0 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65129 |
CVE-2026-65129 | MEDIUM | 6.7 | 6.7 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65128 |
CVE-2026-65128 | HIGH | 8.8 | 8.8 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65127 |
CVE-2026-65127 | MEDIUM | 4.1 | 4.1 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65126 |
CVE-2026-65126 | MEDIUM | 5.0 | 5.0 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65125 |
CVE-2026-65125 | MEDIUM | 6.6 | 6.6 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65124 |
CVE-2026-65124 | MEDIUM | 5.9 | 5.9 | — | nvidia | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65121 |
CVE-2026-65121 | HIGH | 8.2 | 8.2 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-93088 |
CVE-2026-93088 | — | — | 9.8 | — | certcc | 2026-09-22 | 20 | ⚠ Threat | raw · ⬇ |
CVE-2026-95683 |
MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL | MEDIUM | 5.3 | — | — | CIRCL | 2026-09-22 | 10 | — | raw · ⬇ |
CVE-2026-65179 |
CVE-2026-65179 | HIGH | 8.8 | 8.8 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65178 |
CVE-2026-65178 | HIGH | 7.8 | 7.8 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-65111 |
CVE-2026-65111 | HIGH | 7.8 | 7.8 | — | nvidia | 2026-09-22 | 10 | ⚠ Threat | raw · ⬇ |