High-severity CVEs (page 15)
Page 15 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-55239 | High | 8.8 | 2026-10-15 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts… |
CVE-2026-36436 | High | 7.5 | 2026-10-15 | An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated admi… |
CVE-2026-111231 | High | 7.2 | 2026-10-15 | Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore… |
CVE-2026-111229 | High | 7.2 | 2026-10-15 | pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal H… |
CVE-2026-111226 | High | 7.2 | 2026-10-15 | pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to ex… |
CVE-2026-111224 | High | 7.5 | 2026-10-15 | pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to e… |
CVE-2026-111223 | High | 7.2 | 2026-10-15 | Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute… |
CVE-2026-111220 | High | 7.2 | 2026-10-15 | pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by… |
CVE-2026-111218 | High | 7.2 | 2026-10-15 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges t… |
CVE-2026-111217 | High | 7.2 | 2026-10-15 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute comm… |
CVE-2026-111216 | High | 7.2 | 2026-10-15 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute command… |
CVE-2026-111215 | High | 7.2 | 2026-10-15 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a craf… |
CVE-2026-111214 | High | 7.2 | 2026-10-15 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands… |
CVE-2026-111160 | High | 7.5 | 2026-10-15 | LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference worker by supplying the internal… |
CVE-2026-109869 | High | 7.5 | 2026-10-15 | undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation cr… |
CVE-2026-109829 | High | 7.4 | 2026-10-15 | undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cac… |
CVE-2026-109383 | High | 7.4 | 2026-10-15 | undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its… |
CVE-2026-108334 | High | 7.4 | 2026-10-15 | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level… |
CVE-2026-104828 | High | 7.2 | 2026-10-15 | HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded TEXTAREA and TITLE character content without entity encodi… |
CVE-2026-104827 | High | 7.5 | 2026-10-15 | react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, React\Http\Browser uses ClientRequestStre… |
CVE-2026-55246 | High | 7.8 | 2026-10-15 | bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file l… |
CVE-2026-55103 | High | 8.6 | 2026-10-15 | Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, inbound ActivityPub processing does not… |
CVE-2026-111105 | High | 7.0 | 2026-10-15 | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta… |
CVE-2026-103936 | High | 7.5 | 2026-10-15 | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/webrtc webRTCDirect() Node.js listener processes unauthentic… |
CVE-2026-85634 | High | 8.8 | 2026-10-15 | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server… |
CVE-2026-61611 | High | 7.5 | 2026-10-15 | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has no throttle, attempt counter, backoff, CAPTCHA, or lockout… |
CVE-2026-105065 | High | 7.1 | 2026-10-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme.com XStore xstore allows Reflected XSS.This issue… |
CVE-2026-100409 | High | 7.5 | 2026-10-15 | OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications that enable enableCacheInterception, rely on middleware fo… |
CVE-2026-100354 | High | 7.5 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an… |
CVE-2026-100353 | High | 7.5 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths that were missed by the fix for GHSA-p6w… |
CVE-2026-97394 | High | 7.5 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword a… |
CVE-2026-95155 | High | 7.5 | 2026-10-15 | FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supp… |
CVE-2026-92982 | High | 8.5 | 2026-10-15 | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious cust… |
CVE-2026-88753 | High | 7.5 | 2026-10-15 | A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attac… |
CVE-2026-71490 | High | 7.1 | 2026-10-15 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasPrivilege() appends a directly assigned comma-separated <pri… |
CVE-2026-63442 | High | 8.1 | 2026-10-15 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and l… |
CVE-2026-58390 | High | 8.0 | 2026-10-15 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widg… |
CVE-2026-53582 | High | 7.1 | 2026-10-15 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and cert… |
CVE-2026-45452 | High | 8.3 | 2026-10-15 | Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic… |
CVE-2026-45451 | High | 8.3 | 2026-10-15 | : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniS… |
CVE-2026-45450 | High | 8.3 | 2026-10-15 | : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Un… |
CVE-2026-45449 | High | 8.3 | 2026-10-15 | : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. Th… |
CVE-2026-111095 | High | 8.0 | 2026-10-15 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible |
CVE-2026-111094 | High | 8.1 | 2026-10-15 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible |
CVE-2026-111093 | High | 7.5 | 2026-10-15 | In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files |
CVE-2026-111091 | High | 7.8 | 2026-10-15 | In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration |
CVE-2026-100352 | High | 7.5 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values to santho… |
CVE-2026-100351 | High | 7.4 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decod… |
CVE-2026-9703 | High | 7.1 | 2026-10-15 | Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an… |
CVE-2026-95179 | High | 7.5 | 2026-10-15 | An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing… |
CVE-2026-79840 | High | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash. |
CVE-2026-79839 | High | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash. |
CVE-2026-79838 | High | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash. |
CVE-2026-53574 | High | 7.6 | 2026-10-15 | EspoCRM is an open source customer relationship management application. From 8.1.0 until 9.3.8, an authenticated non-administrator can submit a crafted where p… |
CVE-2026-110746 | High | 7.8 | 2026-10-15 | A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and… |
CVE-2026-108116 | High | 7.5 | 2026-10-15 | In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML… |
CVE-2026-93649 | High | 7.5 | 2026-10-15 | In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the po… |
CVE-2026-79837 | High | 7.3 | 2026-10-15 | A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting i… |
CVE-2026-110724 | High | 7.5 | 2026-10-15 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element… |
CVE-2026-110723 | High | 7.5 | 2026-10-15 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element… |
CVE-2026-109702 | High | 7.1 | 2026-10-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social Share Buttons share-button allows Store… |
CVE-2026-109693 | High | 8.8 | 2026-10-15 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a th… |
CVE-2026-109692 | High | 7.1 | 2026-10-15 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2026-109685 | High | 7.1 | 2026-10-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Re… |
CVE-2026-107416 | High | 7.5 | 2026-10-15 | Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Acces… |
CVE-2026-79834 | High | 7.4 | 2026-10-15 | A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution. |
CVE-2026-79833 | High | 7.5 | 2026-10-15 | A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial o… |
CVE-2026-79832 | High | 7.6 | 2026-10-15 | A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash. |
CVE-2026-109695 | High | 7.5 | 2026-10-15 | Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive Data.This issue affe… |
CVE-2026-108498 | High | 7.1 | 2026-10-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Stored X… |
CVE-2026-108491 | High | 7.1 | 2026-10-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored X… |
CVE-2026-79829 | High | 8.2 | 2026-10-15 | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt. |
CVE-2026-79828 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow. |
CVE-2026-79827 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow. |
CVE-2026-79826 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow. |
CVE-2026-79825 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow. |
CVE-2026-79824 | High | 8.0 | 2026-10-15 | A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a… |
CVE-2026-44084 | High | 7.5 | 2026-10-15 | An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote… |
CVE-2026-26245 | High | 8.8 | 2026-10-15 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2026-26244 | High | 8.8 | 2026-10-15 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2026-109855 | High | 7.5 | 2026-10-15 | undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allo… |
CVE-2026-101290 | High | 7.5 | 2026-10-15 | A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient… |
CVE-2024-22031 | High | 8.5 | 2026-10-15 | A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same… |
CVE-2023-32198 | High | 8.0 | 2026-10-15 | A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote ser… |
CVE-2026-101311 | High | 7.0 | 2026-10-15 | The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync. Additionally… |
CVE-2026-101310 | High | 7.0 | 2026-10-15 | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bou… |
CVE-2026-101309 | High | 7.0 | 2026-10-15 | The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on each use, and Tran… |
CVE-2026-96537 | High | 7.5 | 2026-10-15 | The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated user… |
CVE-2026-81534 | High | 8.8 | 2026-10-15 | The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to… |
CVE-2026-79822 | High | 7.1 | 2026-10-15 | A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. |
CVE-2026-79821 | High | 8.2 | 2026-10-15 | A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down. |
CVE-2026-74920 | High | 7.1 | 2026-10-15 | The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the respo… |
CVE-2026-58100 | High | 7.0 | 2026-10-15 | kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's tab… |
CVE-2026-58099 | High | 7.0 | 2026-10-15 | When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to track list traversal position) b… |
CVE-2026-58098 | High | 8.4 | 2026-10-15 | When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the se… |
CVE-2026-101305 | High | 8.8 | 2026-10-15 | renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then… |
CVE-2026-101304 | High | 7.1 | 2026-10-15 | When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit FD_RESOLVE_BENEATH or the Capsicum… |
CVE-2026-101303 | High | 7.5 | 2026-10-15 | The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A… |
CVE-2026-88043 | High | 7.2 | 2026-10-15 | The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.0 d… |
CVE-2026-18586 | High | 7.2 | 2026-10-15 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via 'order_email' in al… |