High-severity CVEs (page 12)
Page 12 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-112264 | High | 7.8 | 2026-10-19 | BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newline… |
CVE-2026-112263 | High | 7.8 | 2026-10-19 | Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped sin… |
CVE-2026-112262 | High | 7.1 | 2026-10-19 | RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creatin… |
CVE-2026-112146 | High | 7.4 | 2026-10-19 | A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT… |
CVE-2026-112145 | High | 7.3 | 2026-10-19 | A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager._l… |
CVE-2026-112143 | High | 7.3 | 2026-10-19 | A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unkn… |
CVE-2026-112142 | High | 7.3 | 2026-10-19 | A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unk… |
CVE-2026-112141 | High | 7.3 | 2026-10-19 | A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of… |
CVE-2026-103314 | High | 7.4 | 2026-10-19 | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion… |
CVE-2026-88900 | High | 8.8 | 2026-10-19 | Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.1… |
CVE-2026-112139 | High | 7.3 | 2026-10-19 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function… |
CVE-2026-88901 | High | 8.2 | 2026-10-19 | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel. This issue affects Apache Camel: from 4.7.0 before 4.18.5, from 4.19.0… |
CVE-2026-85251 | High | 7.5 | 2026-10-19 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4… |
CVE-2026-85250 | High | 7.5 | 2026-10-19 | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0 before 4.18.5… |
CVE-2026-83531 | High | 8.8 | 2026-10-19 | Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression La… |
CVE-2026-80344 | High | 8.2 | 2026-10-19 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… |
CVE-2026-80343 | High | 8.2 | 2026-10-19 | Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4… |
CVE-2026-80312 | High | 8.2 | 2026-10-19 | Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1… |
CVE-2026-79986 | High | 7.4 | 2026-10-19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue affects Apach… |
CVE-2026-79985 | High | 7.4 | 2026-10-19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. This issue affects Apache Camel… |
CVE-2026-79984 | High | 7.4 | 2026-10-19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects Apache… |
CVE-2026-79983 | High | 7.4 | 2026-10-19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache Camel… |
CVE-2026-78165 | High | 8.8 | 2026-10-19 | Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.1… |
CVE-2026-78164 | High | 8.2 | 2026-10-19 | Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Ca… |
CVE-2026-112104 | High | 7.3 | 2026-10-19 | A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote… |
CVE-2026-64943 | High | 8.1 | 2026-10-19 | Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written… |
CVE-2026-111408 | High | 8.8 | 2026-10-19 | Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Surv… |
CVE-2026-111398 | High | 7.7 | 2026-10-19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vec… |
CVE-2026-110379 | High | 7.1 | 2026-10-19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This i… |
CVE-2026-104679 | High | 7.1 | 2026-10-19 | VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product t… |
CVE-2026-76740 | High | 7.2 | 2026-10-19 | A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to e… |
CVE-2026-16460 | High | 7.4 | 2026-10-19 | A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current contai… |
CVE-2026-112082 | High | 7.5 | 2026-10-19 | A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt… |
CVE-2026-111440 | High | 7.0 | 2026-10-19 | 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String… |
CVE-2026-112044 | High | 7.3 | 2026-10-19 | A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationS… |
CVE-2026-111441 | High | 8.1 | 2026-10-19 | 在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_… |
CVE-2026-108984 | High | 7.5 | 2026-10-19 | A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . |
CVE-2026-112025 | High | 7.3 | 2026-10-18 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown func… |
CVE-2026-109553 | High | 7.5 | 2026-10-18 | Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea trusts a user… |
CVE-2026-111990 | High | 7.3 | 2026-10-18 | A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query… |
CVE-2026-78497 | High | 8.4 | 2026-10-18 | JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test(… |
CVE-2026-112021 | High | 7.5 | 2026-10-18 | snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap mem… |
CVE-2026-112018 | High | 7.0 | 2026-10-18 | cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats() that allows attackers to write outside the output buffer… |
CVE-2026-112015 | High | 7.5 | 2026-10-18 | Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested su… |
CVE-2026-112005 | High | 7.7 | 2026-10-18 | WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB file… |
CVE-2026-112001 | High | 7.2 | 2026-10-18 | ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's credentia… |
CVE-2026-112000 | High | 7.6 | 2026-10-18 | Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregist… |
CVE-2026-111999 | High | 7.5 | 2026-10-18 | Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus throug… |
CVE-2026-110897 | High | 7.1 | 2026-10-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder power… |
CVE-2026-110895 | High | 8.5 | 2026-10-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Inje… |
CVE-2026-110383 | High | 7.5 | 2026-10-18 | Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-a… |
CVE-2026-110382 | High | 7.1 | 2026-10-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-app… |
CVE-2026-110373 | High | 8.1 | 2026-10-18 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Log… |
CVE-2026-109895 | High | 7.1 | 2026-10-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This iss… |
CVE-2026-108485 | High | 7.1 | 2026-10-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue… |
CVE-2026-107436 | High | 8.8 | 2026-10-18 | Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimoni… |
CVE-2026-96534 | High | 7.7 | 2026-10-18 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a paramet… |
CVE-2026-110981 | High | 7.1 | 2026-10-18 | The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event ha… |
CVE-2026-110031 | High | 7.2 | 2026-10-18 | The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to… |
CVE-2026-111873 | High | 7.3 | 2026-10-18 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::top… |
CVE-2026-111872 | High | 7.3 | 2026-10-18 | A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the functio… |
CVE-2026-111871 | High | 7.3 | 2026-10-18 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown f… |
CVE-2026-111866 | High | 7.3 | 2026-10-18 | A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the fi… |
CVE-2026-111927 | High | 7.7 | 2026-10-17 | Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyB… |
CVE-2026-111924 | High | 7.5 | 2026-10-17 | Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed reques… |
CVE-2026-111923 | High | 7.5 | 2026-10-17 | Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash… |
CVE-2026-111909 | High | 8.1 | 2026-10-17 | phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user pe… |
CVE-2026-111908 | High | 8.3 | 2026-10-17 | phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT /api/v3.1/faq/update endpoi… |
CVE-2026-111907 | High | 7.1 | 2026-10-17 | phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrat… |
CVE-2026-111901 | High | 7.5 | 2026-10-17 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attack… |
CVE-2026-111898 | High | 7.5 | 2026-10-17 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching prefe… |
CVE-2026-111897 | High | 7.1 | 2026-10-17 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs out… |
CVE-2026-111884 | High | 8.3 | 2026-10-17 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail in the user control panel (UserCo… |
CVE-2026-111882 | High | 8.1 | 2026-10-17 | phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to skip… |
CVE-2026-111881 | High | 7.6 | 2026-10-17 | FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Ze… |
CVE-2026-111880 | High | 7.4 | 2026-10-17 | FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unaut… |
CVE-2026-109701 | High | 7.1 | 2026-10-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PAYCOMET PAYCOMET for WooCommerce paytpv-for-woocommerce… |
CVE-2026-110889 | High | 7.5 | 2026-10-17 | Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This is… |
CVE-2026-111110 | High | 7.2 | 2026-10-17 | The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd' par… |
CVE-2026-100316 | High | 7.2 | 2026-10-17 | The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all versions… |
CVE-2026-110384 | High | 7.1 | 2026-10-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fancy Comments WordPress fancy-facebook-c… |
CVE-2026-96660 | High | 7.2 | 2026-10-17 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin… |
CVE-2026-92798 | High | 8.1 | 2026-10-17 | The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due to i… |
CVE-2026-108123 | High | 7.5 | 2026-10-17 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due t… |
CVE-2026-103899 | High | 7.2 | 2026-10-17 | The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, an… |
CVE-2026-109208 | High | 7.2 | 2026-10-17 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (R… |
CVE-2026-107762 | High | 7.5 | 2026-10-17 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, a… |
CVE-2026-104734 | High | 7.2 | 2026-10-17 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including… |
CVE-2026-111855 | High | 7.5 | 2026-10-17 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. I… |
CVE-2026-111854 | High | 8.1 | 2026-10-17 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote… |
CVE-2026-111853 | High | 8.8 | 2026-10-17 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI comman… |
CVE-2026-110758 | High | 7.5 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace. Under allow_whitespac… |
CVE-2026-110755 | High | 7.5 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, t… |
CVE-2026-110752 | High | 7.5 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a r… |
CVE-2026-96627 | High | 8.8 | 2026-10-16 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in backend/api/handlers/users.go sets Password… |
CVE-2026-96626 | High | 8.5 | 2026-10-16 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/c… |
CVE-2026-68498 | High | 7.5 | 2026-10-16 | StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object property name can consume while being… |
CVE-2026-62439 | High | 7.0 | 2026-10-16 | A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into… |
CVE-2026-49410 | High | 8.1 | 2026-10-16 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against… |
CVE-2026-111044 | High | 7.6 | 2026-10-16 | Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to… |