Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,503 vulnerabilities match.

CVESeveritySummary
CVE-2026-821189.8 CriticalStack-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-821209.8 CriticalHeap-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-821199.8 CriticalOS Command Injection Vulnerability in HiRDB
CVE-2026-821217.5 HighOrigin Validation Error Vulnerability in HiRDB
CVE-2026-821229.4 CriticalStack-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-769399.8 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769369.4 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769379.4 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769389.8 CriticalAuthentication Bypass Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769359.4 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769349.8 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769329.4 CriticalStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-769339.4 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
CVE-2026-865779.4 CriticalOut-of-bounds Write Vulnerability in JP1 Products
CVE-2026-865769.4 CriticalHeap-based Buffer Overflow Vulnerability in JP1 Products
CVE-2026-865759.4 CriticalStack-based Buffer Overflow Vulnerability in JP1 Products
CVE-2026-865749.8 CriticalHeap-based Buffer Overflow Vulnerability in JP1/Base
CVE-2026-1071476.3 MediumAuthentication bypass by spoofing in twofactor_gauthenticator
CVE-2026-1071466.3 MediumInsufficient session expiration in twofactor_gauthenticator
CVE-2026-1071456.3 MediumLack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator
CVE-2026-1027875.3 MediumJoomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
CVE-2026-1027889.3 CriticalJoomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2
CVE-2026-1027899.3 CriticalJoomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2
CVE-2026-1174948.3 HighMultiple vulnerabilities in Sisense’s Cloud BI Platform
CVE-2026-1174938.3 HighMultiple vulnerabilities in Sisense’s Cloud BI Platform
CVE-2026-852998.3 HighMissing Authorization in Compute Engine allows Cross-Project Disk Exfiltration
CVE-2026-928859.8 CriticalQode Membership <= 2.0.6.2 - Authentication Bypass via Social Login
CVE-2026-652136.6 MediumSupermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability
CVE-2026-652117.2 HighSupermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability
CVE-2026-652104.9 MediumSupermicro BMC IPMI feature contains Arbitrary File Access vulnerability
CVE-2026-652208.8 HighSupermicro BMC IPMI feature contains a Privilege escalation vulnerability
CVE-2026-652197.4 HighSupermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability
CVE-2026-184513.1 LowSupermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
CVE-2026-184509.8 CriticalSupermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability
CVE-2026-105116.4 MediumJupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter
CVE-2026-184497.5 HighSupermicro BMC contains a SMCRAKP Fixed Key vulnerability
CVE-2026-1074724.3 MediumOut-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt
CVE-2026-165217.2 HighSupermicro BMC's syslog feature contains a command injection vulnerability
CVE-2026-1114617.5 HighSMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series
CVE-2026-1010346.8 MediumSecurity Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials
CVE-2026-1114607.7 HighStatic HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series
CVE-2026-1114597.6 HighUnauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
CVE-2026-1061746.7 MediumA improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP…
CVE-2026-1059465.3 MediumOut-of-bounds read vulnerability in NTLM authentication handling impacts Qt
CVE-2026-1033253.7 LowTiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass
CVE-2026-1033595.3 MediumPayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery
CVE-2026-1109106.3 Mediumqs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection
CVE-2026-758918.8 HighKirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint
CVE-2026-1033125.3 MediumPayment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback
CVE-2026-1033325.3 MediumPayex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.