The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,897 matching vulnerabilities · Page 116 of 778

nico231 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-18072 · nico23 Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick …

Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … 10.8.7 - Unauthenticated Authentication Bypass via Hardcoded Backdoor in '_wplogin' Parameter

EPSS 3%CVSS 9.8

goshs-labs2 vulnerabilities on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-62325 · goshs-labs goshs

goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-64863 · goshs-labs goshs

goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

EPSS 0.4%public exploit CVSS 9.1

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-69943 · mitre

kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid.

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-65340 · mitre

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-67403 · mitre

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name.

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-67404 · mitre

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and…

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-69942 · mitre

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.

EPSS 0.3%public exploit CVSS 9.8

StylemixThemes1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-14900 · StylemixThemes Cost Calculator Builder PRO

Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter

EPSS 1%CVSS 9.8

IBM8 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-14512 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information

EPSS 1.0%CVSS 9.8

CVE-2026-14959 · IBM Aspera Faspex 5

OS Command Injection in IBM Aspera Faspex

EPSS 2%CVSS 9.1

CVE-2026-14974 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities

EPSS 0.7%CVSS 9.8

CVE-2026-14958 · IBM Aspera Faspex 5

OS command injection in IBM Aspera Faspex

EPSS 0.8%CVSS 9.1

CVE-2026-14976 · IBM WebSphere Application Server - Liberty

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-14446 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by a privilege escalation

EPSS 0.5%CVSS 9.8

CVE-2026-16184 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by an authentication bypass

EPSS 0.5%CVSS 9.8

CVE-2026-14973 · IBM Aspera Desktop App

Path Traversal in IBM Desktop App

EPSS 0.5%CVSS 9.3

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-13423 · Unknown Streamit

Streamit < 4.5.2 - Unauthenticated Remote Code Execution via Arbitrary Function Call

EPSS 1.0%CVSS 9.8

aimy-extensions.com1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-65883 · aimy-extensions.com Aimy Captcha-Less Form Guard plugin for Joomla

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0

EPSS 0.8%CVSS 10.0

hypequery1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-54658 · hypequery hypequery

@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

EPSS 0.8%CVSS 9.8

Apache Software Foundation13 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-33267 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata

EPSS 0.6%CVSS 10.0

CVE-2026-57834 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Malformed chunked message body allows request smuggling

EPSS 0.6%CVSS 10.0

CVE-2026-58150 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: HTTP/2 requests with Transfer-Encoding are not rejected, allowing request smuggling

EPSS 0.6%CVSS 10.0

CVE-2026-59243 · Apache Software Foundation Apache Airflow FAB provider

Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)

EPSS 0.6%CVSS 9.8

CVE-2026-58177 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

EPSS 0.6%CVSS 9.8

CVE-2026-58179 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: regex_remap plugin overflows the stack from attacker input

EPSS 0.6%CVSS 9.8

CVE-2026-58185 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Use-after-free in the intercept plugin

EPSS 0.6%CVSS 9.8

CVE-2026-58161 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server

EPSS 0.7%CVSS 9.2

CVE-2026-58163 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

EPSS 0.7%CVSS 9.1

CVE-2026-41920 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: SNI to Host header matching policy is not properly enforced

EPSS 0.5%CVSS 9.3

CVE-2026-58154 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Memory-safety errors in MIME and header parsing

EPSS 0.5%CVSS 9.2

CVE-2026-58155 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling

EPSS 0.5%CVSS 9.3

CVE-2026-58162 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates

EPSS 0.4%CVSS 10.0

Vacron1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-18191 · Vacron VIN-DS783E-E6

Vacron｜IP Camera - Hidden Functionality

EPSS 0.7%CVSS 9.8

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-63227 · An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server. Koollab LMS

Unrestricted SCORM file upload vulnerability

EPSS 0.6%CVSS 9.9

balbooa.com2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-65884 · balbooa.com Gridbox extension for Joomla

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2

EPSS 0.5%CVSS 10.0

CVE-2026-65885 · balbooa.com Gridbox extension for Joomla

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2

EPSS 0.5%CVSS 9.4

Three Learning5 vulnerabilities on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-63232 · Three Learning Koollab LMS

SQL injection and unsafe deserialisation vulnerability

EPSS 0.5%CVSS 9.9

CVE-2026-63233 · Three Learning Koollab LMS

SQL injection and unsafe deserialisation vulnerability

EPSS 0.5%CVSS 9.9

CVE-2026-63234 · Three Learning Koollab LMS

SQL injection and unsafe deserialisation vulnerability

EPSS 0.5%CVSS 9.9

CVE-2026-63229 · Three Learning Koollab LMS

Pre-authentication blind SQL injection vulnerability

EPSS 0.5%CVSS 9.1

CVE-2026-63230 · Three Learning Koollab LMS

Pre-authentication error-based SQL injection vulnerability

EPSS 0.5%CVSS 9.1

HashiCorp1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-16498 · HashiCorp Tooling

terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode

EPSS 0.5%CVSS 10.0

holest1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-10656 · holest Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light

Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Missing Authorization to Unauthenticated Privilege Escalation via Admin Account Creation

EPSS 0.5%CVSS 9.8

pivotick1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-67174 · pivotick pivotick

DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

EPSS 0.6%CVSS 9.2

Schneider Electric1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-0667 · Schneider Electric SCADAPack 47x

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service…

EPSS 0.5%CVSS 9.3

Meta Box1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-14488 · Meta Box Meta Box AIO

Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter

EPSS 0.5%CVSS 9.1

Ellucian1 vulnerability on this pageMax CVSS 9.4Priority 34KEV 0

CVE-2026-6881 · Ellucian Advance Web

Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Advance

EPSS 0.3%CVSS 9.4

EnterpriseDB2 vulnerabilities on this pageMax CVSS 9.0Priority 34KEV 0

CVE-2026-50736 · EnterpriseDB pglogical

The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes mess…

EPSS 0.4%CVSS 9.0

CVE-2026-50737 · EnterpriseDB pglogical

When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressi…

EPSS 0.4%CVSS 9.0