Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,180 vulnerabilities match.

CVESeveritySummary
CVE-2026-1095236.9 Mediumgirishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection
CVE-2026-1041929.6 CriticalDragonflyDB stream RDB deserialization double-free
CVE-2026-117326.3 MediumInsufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models
CVE-2026-117316.3 MediumAuthentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
CVE-2026-117302.1 LowInsufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
CVE-2026-92184.3 MediumInsufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access
CVE-2026-537115.1 MediumMCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI
CVE-2026-537099.8 CriticalMCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
CVE-2026-1095226.9 Mediumgirishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection
CVE-2026-1081857.4 HighImproper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
CVE-2026-1023425.4 Mediumammonia allows stored XSS through unsanitized SVG animate and set attributes
CVE-2026-1081847.4 HighImproper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
CVE-2026-973348.7 HighNetwork messaging layer decompression resource exhaustion
CVE-2026-973337.1 HighQAPI stack-based buffer overflow
CVE-2026-771008.7 HighMediaAgent Denial of Service
CVE-2026-770999.3 CriticalCVFS Command Execution
CVE-2026-770967.7 HighCVFS Missing Authentication
CVE-2026-770957.1 HighCvFWD Null Pointer Dereference
CVE-2026-770947.1 HighCvFWD Out-of-Bounds Write
CVE-2026-770937.1 HighCvFWD Denial of Service
CVE-2026-770908.7 HighCVFS Information Disclosure
CVE-2026-182287.1 HighHyperscale Path Traversal
CVE-2026-534208.0 HighBuffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.
CVE-2026-1026035.3 MediumGotify: Insufficiently Protected Password Change endpoint
CVE-2026-652003.5 LowHuawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses
CVE-2026-651995.4 MediumHuawei openUBMC low-privilege SNMP to administrator privilege escalation
CVE-2026-651988.6 HighHuawei Default SNMPv3 USM key
CVE-2026-651973.1 LowH3C G3/G5 HDM Firmware Verification Key Replacement
CVE-2026-1074609.1 CriticalApache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding
CVE-2026-534188.1 HighImproper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVE-2026-1095216.9 Mediumgirishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection
CVE-2026-126568.7 High1732E ArmorBlock® - Multiple Vulnerabilities
CVE-2026-48695.4 MediumPotential Privilege Escalation in InstallShield
CVE-2026-126558.8 High1732E ArmorBlock® - Multiple Vulnerabilities
CVE-2026-08935.8 MediumUncleared Password Keystrokes Vulnerability
CVE-2025-587748.3 HighUEFI OOB Write and Buffer Overflow Vulnerabilities
CVE-2025-587737.1 HighUEFI OOB Write and Buffer Overflow Vulnerabilities
CVE-2025-587728.2 HighUEFI OOB Write and Buffer Overflow Vulnerabilities
CVE-2025-587717.1 HighUEFI OOB Write and Buffer Overflow Vulnerabilities
CVE-2026-773614.7 Mediumobsidian-tc symlink path mismatch bypasses read ACL restrictions
CVE-2026-1099678.7 Highyt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats
CVE-2026-1099666.9 Mediumyt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Method
CVE-2026-1099658.4 HighSerena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root
CVE-2026-1095209.3 CriticalColorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions
CVE-2026-773624.3 Mediumobsidian-tc bridge tools expose data outside the read ACL
CVE-2026-939078.1 HighIBM WebSphere Application Server is affected by a bypass authentication vulnerability
CVE-2026-956808.0 HighIBM WebSphere Application Server is affected by an authorization bypass
CVE-2026-1034997.5 HighIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
CVE-2026-1095196.9 MediumYouTransfer Template Rendering template path traversal
CVE-2026-1099646.3 MediumImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.