CVEs
Common Vulnerabilities & Exposures ingested from CVE Project cvelistV5, NVD and EUVD. Filter by year or search by ID / title.
204905 CVEs matched. Showing 251–300 (page 6 of 4099).
HIGH and CRITICAL CVEs are auto-promoted to the Threats table; the Threat column below shows the link when a promotion exists.
Click a column header to sort all results; click the active column again to reverse.
| CVE-ID ↕ | Title ↕ | Severity ↕ | Score (overview) ↕ | NVD Score | MSRC Score | CNA ↕ | Published ↕ | Remediations | Threat | Source |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-8508 |
CVE-2026-8508 | MEDIUM | 6.5 | — | — | Zyxel | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-6837 |
CVE-2026-6837 | HIGH | 7.2 | — | — | Zyxel | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-18720 |
kalcaddle kodbox msgWarning Plugin action improper authorization | MEDIUM | 6.9 | — | — | VulDB | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-18719 |
cemtan sar2html Search sar2html.py sql injection | MEDIUM | 5.3 | 6.3 | — | VulDB | 2026-08-04 | 10 | — | raw · ⬇ |
CVE-2026-58042 |
CVE-2026-58042 | MEDIUM | 5.9 | — | — | hackerone | 2026-08-04 | 10 | — | raw · ⬇ |
CVE-2026-56846 |
CVE-2026-56846 | HIGH | 7.5 | — | — | hackerone | 2026-08-04 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-58044 |
CVE-2026-58044 | LOW | 3.7 | — | — | hackerone | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-58045 |
CVE-2026-58045 | MEDIUM | 6.2 | — | — | hackerone | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-58041 |
CVE-2026-58041 | MEDIUM | 5.3 | — | — | hackerone | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-56845 |
CVE-2026-56845 | HIGH | 7.5 | — | — | hackerone | 2026-08-04 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-11835 |
Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU) | MEDIUM | 5.6 | — | — | Caliptra | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-11836 |
Production Debug-Unlock Token Verification Missing Device Binding | LOW | 1.8 | — | — | Caliptra | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-18686 |
GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection | CRITICAL | 9.3 | 9.8 | — | VulDB | 2026-08-04 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2025-29296 |
CVE-2025-29296 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-67862 |
CVE-2026-67862 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-67979 |
CVE-2026-67979 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-67860 |
CVE-2026-67860 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-67858 |
CVE-2026-67858 | HIGH | 7.5 | — | — | mitre | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-67856 |
CVE-2026-67856 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-67861 |
CVE-2026-67861 | HIGH | 7.5 | — | — | mitre | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-67859 |
CVE-2026-67859 | HIGH | 7.5 | — | — | mitre | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-67857 |
CVE-2026-67857 | HIGH | 7.5 | — | — | mitre | 2026-08-04 | — | ⚠ Threat | raw · ⬇ |
CVE-2026-67855 |
CVE-2026-67855 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-51400 |
CVE-2026-51400 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-52370 |
CVE-2026-52370 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-51401 |
CVE-2026-51401 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-51144 |
CVE-2026-51144 | — | — | — | — | mitre | 2026-08-04 | — | — | raw · ⬇ |
CVE-2026-18685 |
GL.iNet GL-MT3000 modem.so glc set_upgrade command injection | CRITICAL | 9.3 | 9.8 | — | VulDB | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18684 |
GL.iNet GL-MT3000 modem.so glc remove_profile command injection | CRITICAL | 9.3 | 9.8 | — | VulDB | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48323 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48333 |
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | CRITICAL | 9.8 | 9.8 | — | adobe | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48317 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (C… | CRITICAL | 9.6 | 9.6 | — | adobe | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48331 |
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48330 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE… | CRITICAL | 10.0 | 10.0 | — | adobe | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48399 |
Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657) | HIGH | 7.5 | 7.5 | — | adobe | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48326 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE… | CRITICAL | 9.9 | 9.9 | — | adobe | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18667 |
Sensor Proxy Version 1.4.2 Fixes One Vulnerability | CRITICAL | 9.3 | 9.6 | — | tenable | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-46714 |
Misskey: Denial of Service via Uncontrolled Recursion in Theme Compilation | MEDIUM | 5.1 | — | — | GitHub_M | 2026-08-03 | — | — | raw · ⬇ |
CVE-2026-47746 |
Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks | HIGH | 8.9 | — | — | GitHub_M | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-67617 |
Microweber CMS 2.0.20 Stored XSS via tag_names Parameter | MEDIUM | 4.8 | 4.8 | — | VulnCheck | 2026-08-03 | — | — | raw · ⬇ |
CVE-2026-67616 |
Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint | MEDIUM | 5.3 | 4.3 | — | VulnCheck | 2026-08-03 | — | — | raw · ⬇ |
CVE-2026-46713 |
Misskey: JSON-LD signature validation + compaction may lead to improper activity handling | CRITICAL | 9.2 | — | — | GitHub_M | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-18682 |
OpenAkita File Upload API upload cross site scripting | LOW | 2.3 | 3.1 | — | VulDB | 2026-08-03 | — | — | raw · ⬇ |
CVE-2026-46712 |
Misskey: Lack of proper permission checks in Direct Messaging feature | LOW | 2.3 | — | — | GitHub_M | 2026-08-03 | — | — | raw · ⬇ |
CVE-2026-69249 |
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | HIGH | 8.7 | — | — | GitHub_M | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-48115 |
Misskey: Improper Authorization in the Announcements API | MEDIUM | 6.3 | — | — | GitHub_M | 2026-08-03 | — | — | raw · ⬇ |
CVE-2026-69248 |
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees | MEDIUM | 6.9 | — | — | GitHub_M | 2026-08-03 | — | — | raw · ⬇ |
CVE-2026-10849 |
Heap out-of-bounds write in Zephyr hawkBit OTA client when terminating server response body | HIGH | 8.2 | 8.2 | — | zephyr | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-69247 |
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing | HIGH | 8.2 | — | — | GitHub_M | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |
CVE-2026-69246 |
Guzzle: Noncanonical host can bypass host-based checks | HIGH | 7.2 | 7.2 | — | GitHub_M | 2026-08-03 | 10 | ⚠ Threat | raw · ⬇ |