Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,123 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-108151 | 5.3 Medium | WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability | Oct 14, 2026 |
| CVE-2026-103081 | 7.5 High | WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability | Oct 14, 2026 |
| CVE-2026-104103 | 8.1 High | Ludwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members | Oct 14, 2026 |
| CVE-2026-110777 | 5.7 Medium | Evolution-data-server: local file disclosure via attach file:// uris | Oct 14, 2026 |
| CVE-2026-54554 | 7.5 High | FOG adInfo endpoint is reported to disclose the Active Directory join password | Oct 14, 2026 |
| CVE-2026-100413 | 7.0 High | SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments | Oct 14, 2026 |
| CVE-2026-77371 | 9.3 Critical | Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access | Oct 14, 2026 |
| CVE-2026-79957 | 8.1 High | ServiceNext Insecure Direct Object Reference via GetUsarios | Oct 14, 2026 |
| CVE-2026-76083 | 4.9 Medium | Redash: JSON data source query URL can bypass base URL restriction | Oct 14, 2026 |
| CVE-2026-42093 | 8.7 High | Redash: SQL Injection via Query Results parameterized query substitution | Oct 14, 2026 |
| CVE-2026-109527 | 7.5 High | Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies | Oct 14, 2026 |
| CVE-2026-86849 | 6.5 Medium | Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto | Oct 14, 2026 |
| CVE-2026-86856 | 6.5 Medium | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver | Oct 14, 2026 |
| CVE-2026-86847 | 6.5 Medium | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup | Oct 14, 2026 |
| CVE-2026-86846 | 6.5 Medium | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto | Oct 14, 2026 |
| CVE-2026-86845 | 6.5 Medium | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup | Oct 14, 2026 |
| CVE-2026-86566 | 6.5 Medium | Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) | Oct 14, 2026 |
| CVE-2026-86848 | 8.8 High | Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto | Oct 14, 2026 |
| CVE-2026-88164 | 8.8 High | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Oct 14, 2026 |
| CVE-2026-86567 | 8.8 High | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap | Oct 14, 2026 |
| CVE-2026-106465 | 6.9 Medium | Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server | Oct 14, 2026 |
| CVE-2026-108395 | 7.5 High | Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies | Oct 14, 2026 |
| CVE-2026-106464 | 8.7 High | Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing | Oct 14, 2026 |
| CVE-2026-103415 | 9.3 Critical | When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the… | Oct 14, 2026 |
| CVE-2026-107350 | 8.8 High | Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer | Oct 14, 2026 |
| CVE-2026-107349 | 7.5 High | Infinite loop on empty option name in startup options parameter in PgBouncer | Oct 14, 2026 |
| CVE-2026-107348 | 5.9 Medium | Integer overflow causes an infinite loop in message buffer growth in PgBouncer | Oct 14, 2026 |
| CVE-2026-103414 | 8.4 High | The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page_header_data_size` is never validated against the glyph… | Oct 14, 2026 |
| CVE-2026-86461 | 8.8 High | FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter | Oct 14, 2026 |
| CVE-2026-0322 | 8.6 High | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface | Oct 14, 2026 |
| CVE-2026-101954 | 9.3 Critical | Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled | Oct 14, 2026 |
| CVE-2026-101952 | 8.7 High | Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled | Oct 14, 2026 |
| CVE-2026-101949 | 8.7 High | Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash | Oct 14, 2026 |
| CVE-2026-92160 | 6.5 Medium | F´: SendPartial Integer Overflow Leading to Assertion DoS | Oct 14, 2026 |
| CVE-2026-101964 | 7.1 High | Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message | Oct 14, 2026 |
| CVE-2026-101963 | 8.7 High | Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used | Oct 14, 2026 |
| CVE-2026-101962 | 8.7 High | Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used | Oct 14, 2026 |
| CVE-2026-92155 | 7.5 High | F´: FileUplink Unknown Packet Type Assertion DoS | Oct 14, 2026 |
| CVE-2026-101961 | 8.7 High | Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy | Oct 14, 2026 |
| CVE-2026-101959 | 7.1 High | Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash | Oct 14, 2026 |
| CVE-2026-92150 | 7.5 High | F´: GenericHub Malformed Buffer Assertion DoS | Oct 14, 2026 |
| CVE-2026-101983 | 9.3 Critical | Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured | Oct 14, 2026 |
| CVE-2026-108390 | 9.9 Critical | HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking | Oct 14, 2026 |
| CVE-2026-92154 | 8.1 High | F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation | Oct 14, 2026 |
| CVE-2026-101982 | 9.3 Critical | Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used | Oct 14, 2026 |
| CVE-2026-101981 | 8.7 High | Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled | Oct 14, 2026 |
| CVE-2026-101979 | 8.7 High | Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled | Oct 14, 2026 |
| CVE-2026-101976 | 8.7 High | Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash | Oct 14, 2026 |
| CVE-2026-101975 | 7.1 High | Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used | Oct 14, 2026 |
| CVE-2026-101972 | 7.1 High | Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled | Oct 14, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.