High-severity CVEs (page 45)
Page 45 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-28625 | High | 7.8 | 2026-10-05 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additio… |
CVE-2026-105643 | High | 7.3 | 2026-10-05 | Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-s… |
CVE-2026-105642 | High | 8.8 | 2026-10-05 | Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG han… |
CVE-2026-105635 | High | 7.4 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{slug}/projects/{project_id}/join/{pk}/ uses permis… |
CVE-2026-105634 | High | 8.1 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows any project member, including a user wit… |
CVE-2026-105387 | High | 7.3 | 2026-10-05 | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function… |
CVE-2026-105386 | High | 7.3 | 2026-10-05 | A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the functi… |
CVE-2026-104714 | High | 8.8 | 2026-10-05 | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message formats a… |
CVE-2026-104712 | High | 7.5 | 2026-10-05 | Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal (java.math… |
CVE-2026-103349 | High | 7.2 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Object Injection.This issue affec… |
CVE-2026-103334 | High | 7.5 | 2026-10-05 | Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations all… |
CVE-2026-100515 | High | 7.1 | 2026-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-review… |
CVE-2026-105633 | High | 7.1 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id in the URL but omits it from the datab… |
CVE-2026-105631 | High | 7.5 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEndpoint.get resolve FileAsset record… |
CVE-2026-105630 | High | 8.7 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xm… |
CVE-2026-105629 | High | 7.1 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare primary-key lookup… |
CVE-2026-105628 | High | 7.6 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url from provider user data through a… |
CVE-2026-105385 | High | 7.3 | 2026-10-05 | A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an… |
CVE-2026-105384 | High | 7.3 | 2026-10-05 | A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patient… |
CVE-2026-104979 | High | 8.7 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects… |
CVE-2026-104978 | High | 8.2 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's project invitation list endpoint is accessible to any authenticated user who knows the… |
CVE-2026-104977 | High | 7.7 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shippe… |
CVE-2026-104975 | High | 7.1 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v2.py were remediated for two cross… |
CVE-2026-104974 | High | 8.1 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, a user whose account has been deactivated by setting is_active=False can still log in with exi… |
CVE-2026-104973 | High | 7.6 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP addresses only when the webhook is created in… |
CVE-2026-104971 | High | 8.5 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, DuplicateAssetEndpoint fetches a source FileAsset without limiting it to the caller's workspac… |
CVE-2026-104905 | High | 8.1 | 2026-10-05 | FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData() that allows authenticated attackers to tr… |
CVE-2026-101919 | High | 8.8 | 2026-10-05 | A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the privileged contr… |
CVE-2025-15643 | High | 7.1 | 2026-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Fernandez Adsmonetizer adsensei-b30 allows Reflected… |
CVE-2026-12171 | High | 7.8 | 2026-10-05 | auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into i… |
CVE-2026-105383 | High | 7.3 | 2026-10-05 | A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of… |
CVE-2026-105382 | High | 7.3 | 2026-10-05 | A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update_subaccount o… |
CVE-2026-104970 | High | 8.1 | 2026-10-05 | Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-22… |
CVE-2026-102779 | High | 7.3 | 2026-10-05 | Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site… |
CVE-2026-102282 | High | 7.1 | 2026-10-05 | adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip e… |
CVE-2026-88396 | High | 7.2 | 2026-10-05 | ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's ex… |
CVE-2026-104891 | High | 7.5 | 2026-10-05 | mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx… |
CVE-2026-104890 | High | 7.2 | 2026-10-05 | Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php… |
CVE-2026-102775 | High | 7.5 | 2026-10-05 | Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-file downl… |
CVE-2026-88394 | High | 7.5 | 2026-10-05 | WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from t… |
CVE-2026-88392 | High | 7.5 | 2026-10-05 | Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbitrary code. |
CVE-2026-92931 | High | 8.8 | 2026-10-05 | CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attack… |
CVE-2026-77805 | High | 7.9 | 2026-10-05 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by th… |
CVE-2026-105307 | High | 7.3 | 2026-10-05 | A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz_filter.go of the component API Endpoint. Pe… |
CVE-2026-105290 | High | 7.3 | 2026-10-05 | A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.p… |
CVE-2026-19185 | High | 7.8 | 2026-10-05 | The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the broadcast ccc.data buffer and the targe… |
CVE-2026-19184 | High | 8.4 | 2026-10-05 | The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->buffer_size, which is expressed in bytes, against the number of… |
CVE-2026-105253 | High | 7.3 | 2026-10-05 | A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. T… |
CVE-2026-104408 | High | 7.6 | 2026-10-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injecti… |
CVE-2026-104407 | High | 7.1 | 2026-10-05 | Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects Pow… |
CVE-2026-104389 | High | 8.5 | 2026-10-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affe… |
CVE-2026-105314 | High | 7.5 | 2026-10-05 | Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to… |
CVE-2026-105247 | High | 7.3 | 2026-10-05 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/adm… |
CVE-2026-105246 | High | 7.3 | 2026-10-05 | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/S… |
CVE-2026-105238 | High | 7.3 | 2026-10-05 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the compone… |
CVE-2019-25777 | High | 7.3 | 2026-10-05 | YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/g… |
CVE-2026-105232 | High | 7.3 | 2026-10-05 | A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted… |
CVE-2026-105231 | High | 7.3 | 2026-10-05 | A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The a… |
CVE-2026-105230 | High | 7.3 | 2026-10-05 | A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79… |
CVE-2026-105229 | High | 7.3 | 2026-10-05 | A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Thi… |
CVE-2026-105185 | High | 7.3 | 2026-10-05 | A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipu… |
CVE-2026-105184 | High | 7.3 | 2026-10-05 | A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria… |
CVE-2026-105183 | High | 7.3 | 2026-10-05 | A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This ma… |
CVE-2026-105182 | High | 7.3 | 2026-10-05 | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/ass… |
CVE-2026-20586 | High | 8.8 | 2026-10-05 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution… |
CVE-2026-20531 | High | 8.4 | 2026-10-05 | In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges n… |
CVE-2026-20526 | High | 7.5 | 2026-10-05 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20524 | High | 8.4 | 2026-10-05 | In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20523 | High | 8.4 | 2026-10-05 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execu… |
CVE-2026-20522 | High | 8.4 | 2026-10-05 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execu… |
CVE-2026-20521 | High | 8.4 | 2026-10-05 | In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2026-20520 | High | 7.5 | 2026-10-05 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20519 | High | 7.5 | 2026-10-05 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-105295 | High | 7.5 | 2026-10-05 | GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently… |
CVE-2026-105294 | High | 7.4 | 2026-10-05 | Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legc… |
CVE-2026-105293 | High | 8.1 | 2026-10-05 | Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory… |
CVE-2026-105223 | High | 7.4 | 2026-10-05 | maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks cert… |
CVE-2026-105175 | High | 7.3 | 2026-10-05 | A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the… |
CVE-2026-105172 | High | 7.3 | 2026-10-05 | A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Perform… |
CVE-2026-105170 | High | 7.3 | 2026-10-05 | A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Aff… |
CVE-2026-105169 | High | 7.3 | 2026-10-05 | A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c… |
CVE-2026-105222 | High | 7.4 | 2026-10-04 | The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to… |
CVE-2026-105221 | High | 7.4 | 2026-10-04 | The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_c… |
CVE-2026-105220 | High | 7.8 | 2026-10-04 | Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor wi… |
CVE-2026-105167 | High | 7.3 | 2026-10-04 | A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The… |
CVE-2026-105166 | High | 7.3 | 2026-10-04 | A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affe… |
CVE-2026-105219 | High | 7.5 | 2026-10-04 | Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due t… |
CVE-2026-105218 | High | 7.4 | 2026-10-04 | gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payme… |
CVE-2026-105216 | High | 7.4 | 2026-10-04 | go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS he… |
CVE-2026-105089 | High | 8.7 | 2026-10-04 | WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a maliciou… |
CVE-2026-105086 | High | 8.7 | 2026-10-04 | WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-en… |
CVE-2026-105213 | High | 8.2 | 2026-10-04 | ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users of… |
CVE-2026-105212 | High | 7.5 | 2026-10-04 | ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authent… |
CVE-2026-105211 | High | 8.1 | 2026-10-04 | ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP… |
CVE-2026-105210 | High | 8.2 | 2026-10-04 | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initializa… |
CVE-2026-105208 | High | 7.7 | 2026-10-04 | ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper… |
CVE-2026-105158 | High | 7.3 | 2026-10-04 | A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController… |
CVE-2026-105149 | High | 7.3 | 2026-10-04 | A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipul… |
CVE-2026-105148 | High | 7.3 | 2026-10-04 | A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component… |
CVE-2026-105147 | High | 7.3 | 2026-10-04 | A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argumen… |