The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

4,742 matching vulnerabilities · Page 10 of 95

Pedro Marcelo1 vulnerability on this pageMax CVSS 9.2Priority 44KEV 0

CVE-2016-20101 · Pedro Marcelo Issuu Panel

Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php

EPSS 0.4%public exploit CVSS 9.2

totolink28 vulnerabilities on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-9814 · totolink Totolink

An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0…

EPSS 2%CVSS 9.1

CVE-2026-10131 · totolink Totolink

An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-…

EPSS 1%CVSS 9.1

CVE-2026-10135 · totolink Totolink

A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).

EPSS 1%CVSS 9.1

CVE-2026-10138 · totolink Totolink

A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250…

EPSS 1%CVSS 9.1

CVE-2026-35499 · totolink Totolink

An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20…

EPSS 1%CVSS 9.1

CVE-2026-33568 · totolink Totolink

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1…

EPSS 1%CVSS 9.1

CVE-2026-40627 · totolink Totolink

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B…

EPSS 1%CVSS 9.1

CVE-2026-9659 · totolink Totolink

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLIN…

EPSS 0.8%CVSS 9.1

CVE-2026-28763 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X20…

EPSS 0.7%CVSS 9.1

CVE-2026-40615 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-…

EPSS 0.7%CVSS 9.1

CVE-2026-41222 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-…

EPSS 0.7%CVSS 9.1

CVE-2026-41223 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000…

EPSS 0.7%CVSS 9.1

CVE-2026-42019 · totolink Totolink

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000…

EPSS 0.7%CVSS 9.1

CVE-2026-42020 · totolink Totolink

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000…

EPSS 0.7%CVSS 9.1

CVE-2026-10132 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.…

EPSS 0.6%CVSS 9.1

CVE-2026-10133 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504…

EPSS 0.6%CVSS 9.1

CVE-2026-10136 · totolink Totolink

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-…

EPSS 0.6%CVSS 9.1

CVE-2026-10137 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0…

EPSS 0.6%CVSS 9.1

CVE-2026-9827 · totolink Totolink

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202…

EPSS 0.6%CVSS 9.1

CVE-2026-42021 · totolink Totolink

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolin…

EPSS 0.5%CVSS 9.1

CVE-2026-42022 · totolink Totolink

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolin…

EPSS 0.5%CVSS 9.1

CVE-2026-42023 · totolink Totolink

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolin…

EPSS 0.5%CVSS 9.1

CVE-2026-42024 · totolink Totolink

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolin…

EPSS 0.5%CVSS 9.1

CVE-2026-42025 · totolink Totolink

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version…

EPSS 0.5%CVSS 9.1

CVE-2026-42026 · totolink Totolink

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version…

EPSS 0.5%CVSS 9.1

CVE-2026-9660 · totolink Totolink

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLIN…

EPSS 0.5%CVSS 9.1

CVE-2026-9817 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0…

EPSS 0.5%CVSS 9.1

CVE-2026-9869 · totolink Totolink

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.…

EPSS 0.5%CVSS 9.1

Google20 vulnerabilities on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2026-112992 · Google Chrome

Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outsi…

EPSS 0.5%CVSS 9.6

CVE-2026-113007 · Google Chrome

Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…

EPSS 0.5%CVSS 9.6

CVE-2026-113014 · Google Chrome

Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…

EPSS 0.5%CVSS 9.6

CVE-2026-113020 · Google Chrome

Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…

EPSS 0.5%CVSS 9.6

CVE-2026-113072 · Google Chrome

Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside…

EPSS 0.5%CVSS 9.6

CVE-2026-113126 · Google Chrome

Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c…

EPSS 0.5%CVSS 9.6

CVE-2026-113138 · Google Chrome

Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co…

EPSS 0.5%CVSS 9.6

CVE-2026-113171 · Google Chrome

Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit…

EPSS 0.5%CVSS 9.6

CVE-2026-113189 · Google Chrome

Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox vi…

EPSS 0.5%CVSS 9.6

CVE-2026-113211 · Google Chrome

Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cod…

EPSS 0.5%CVSS 9.6

CVE-2026-113222 · Google Chrome

Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the…

EPSS 0.5%CVSS 9.6

CVE-2026-113252 · Google Chrome

Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute…

EPSS 0.5%CVSS 9.6

CVE-2026-113261 · Google Chrome

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…

EPSS 0.5%CVSS 9.6

CVE-2026-113263 · Google Chrome

Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c…

EPSS 0.5%CVSS 9.6

CVE-2026-113270 · Google Chrome

Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandb…

EPSS 0.5%CVSS 9.6

CVE-2026-113283 · Google Chrome

Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially ex…

EPSS 0.5%CVSS 9.6

CVE-2026-113328 · Google Chrome

Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c…

EPSS 0.5%CVSS 9.6

CVE-2026-113336 · Google Chrome

Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…

EPSS 0.5%CVSS 9.6

CVE-2026-113078 · Google Chrome

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra…

EPSS 0.4%CVSS 9.6

CVE-2026-113084 · Google Chrome

Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra…

EPSS 0.4%CVSS 9.6

@fastify/middie1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-112712 · @fastify/middie @fastify/middie

@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch

EPSS 0.3%CVSS 9.1