High-severity CVEs (page 47)
Page 47 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-104418 | High | 7.2 | 2026-10-02 | Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translatio… |
CVE-2026-104416 | High | 7.5 | 2026-10-02 | Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staf… |
CVE-2026-104414 | High | 8.1 | 2026-10-02 | Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into post content via oEm… |
CVE-2026-104413 | High | 7.3 | 2026-10-02 | Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by… |
CVE-2026-104411 | High | 7.3 | 2026-10-02 | Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with ext… |
CVE-2026-104410 | High | 7.5 | 2026-10-02 | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish readers to read password-protected and publish-disabled database rows… |
CVE-2026-94651 | High | 7.5 | 2026-10-02 | improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apache Thrift java bindings. This issue a… |
CVE-2026-85494 | High | 7.5 | 2026-10-02 | Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initi… |
CVE-2026-87920 | High | 7.2 | 2026-10-02 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all versions up to… |
CVE-2026-80298 | High | 8.8 | 2026-10-02 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Inject… |
CVE-2026-103885 | High | 7.5 | 2026-10-02 | Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Apache DS) may consume 100% of a CPU core… |
CVE-2026-103880 | High | 7.5 | 2026-10-02 | Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDA… |
CVE-2026-103878 | High | 7.5 | 2026-10-02 | Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has… |
CVE-2026-103552 | High | 7.3 | 2026-10-02 | Stack Overflow vulnerability in Apache Directory LDAP API. Before binding, a client can send a deeply nested search filter that overflows the stack in the s… |
CVE-2026-102731 | High | 7.5 | 2026-10-02 | Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer (or a MITM) can send a small BER-encoded response c… |
CVE-2026-80443 | High | 7.4 | 2026-10-02 | Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Ch… |
CVE-2026-97663 | High | 7.2 | 2026-10-02 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and inclu… |
CVE-2026-97641 | High | 7.2 | 2026-10-02 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4… |
CVE-2026-97342 | High | 7.2 | 2026-10-02 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Pos… |
CVE-2026-97336 | High | 7.2 | 2026-10-02 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up to, and including, 2.13.0 due to insuf… |
CVE-2026-96871 | High | 7.2 | 2026-10-02 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.2 due… |
CVE-2026-96578 | High | 7.2 | 2026-10-02 | The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to… |
CVE-2026-96567 | High | 7.2 | 2026-10-02 | The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_id' parameter in all versions up to, and including, 5.1.7 due to… |
CVE-2026-96566 | High | 7.2 | 2026-10-02 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'np1' Custom Field Parameter in all v… |
CVE-2026-95817 | High | 7.2 | 2026-10-02 | The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.6.0 due… |
CVE-2026-95670 | High | 7.2 | 2026-10-02 | The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect in all versions up to, and incl… |
CVE-2026-93756 | High | 7.2 | 2026-10-02 | The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment M… |
CVE-2026-17507 | High | 7.5 | 2026-10-02 | In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with t… |
CVE-2026-103426 | High | 7.2 | 2026-10-02 | The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_rt' parameter in all versions up to, and including, 2.31.4 d… |
CVE-2026-102772 | High | 7.2 | 2026-10-02 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<textarea_code field id> (e.g. kl_code, kl_post_code)' parameter in all ver… |
CVE-2026-100182 | High | 7.2 | 2026-10-02 | The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and… |
CVE-2026-100107 | High | 7.2 | 2026-10-02 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2… |
CVE-2026-102565 | High | 7.2 | 2026-10-02 | The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and inc… |
CVE-2026-92820 | High | 8.1 | 2026-10-02 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external (A… |
CVE-2026-92174 | High | 7.5 | 2026-10-02 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter… |
CVE-2026-91828 | High | 7.5 | 2026-10-02 | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that i… |
CVE-2026-90438 | High | 7.2 | 2026-10-02 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text (RTE) Field… |
CVE-2026-15897 | High | 8.8 | 2026-10-02 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is du… |
CVE-2026-10026 | High | 7.2 | 2026-10-02 | The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input validatio… |
CVE-2026-93367 | High | 7.2 | 2026-10-02 | The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and incl… |
CVE-2026-104123 | High | 7.3 | 2026-10-02 | A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /r… |
CVE-2026-104120 | High | 7.3 | 2026-10-02 | A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_ur… |
CVE-2026-103098 | High | 7.5 | 2026-10-02 | Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitte… |
CVE-2026-103097 | High | 7.5 | 2026-10-02 | An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials… |
CVE-2026-103096 | High | 7.5 | 2026-10-02 | API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials di… |
CVE-2026-103766 | High | 7.2 | 2026-10-02 | ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager_access permission to inject SQL via th… |
CVE-2026-103761 | High | 7.5 | 2026-10-01 | Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated att… |
CVE-2026-86344 | High | 7.5 | 2026-10-01 | A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage… |
CVE-2026-51888 | High | 7.5 | 2026-10-01 | langflow-ai langflow v1.8.4 is affected by: Directory Traversal. The impact is: Arbitrary file write outside the intended workspace or storage boundary.. The c… |
CVE-2026-51874 | High | 7.5 | 2026-10-01 | In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intend… |
CVE-2026-51873 | High | 8.8 | 2026-10-01 | Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside the intended project… |
CVE-2026-104051 | High | 8.2 | 2026-10-01 | PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader met… |
CVE-2026-104020 | High | 7.5 | 2026-10-01 | Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the libra… |
CVE-2026-56661 | High | 7.5 | 2026-10-01 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler fetches… |
CVE-2026-54049 | High | 8.7 | 2026-10-01 | Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before 25.3, the Sakai Conversations tool stor… |
CVE-2026-53964 | High | 7.2 | 2026-10-01 | Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remo… |
CVE-2026-103484 | High | 8.8 | 2026-10-01 | IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. |
CVE-2026-102667 | High | 8.3 | 2026-10-01 | Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker… |
CVE-2026-55232 | High | 7.6 | 2026-10-01 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a… |
CVE-2026-55231 | High | 7.2 | 2026-10-01 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, a flawed central path sanitiz… |
CVE-2026-55230 | High | 8.7 | 2026-10-01 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails… |
CVE-2026-15911 | High | 7.4 | 2026-10-01 | Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate v… |
CVE-2026-104059 | High | 8.1 | 2026-10-01 | Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform stat… |
CVE-2026-104057 | High | 7.5 | 2026-10-01 | Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections… |
CVE-2026-97662 | High | 8.2 | 2026-10-01 | An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to cre… |
CVE-2026-68496 | High | 7.5 | 2026-10-01 | The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so… |
CVE-2026-68495 | High | 7.5 | 2026-10-01 | The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so t… |
CVE-2026-104018 | High | 8.8 | 2026-10-01 | An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privil… |
CVE-2023-54404 | High | 7.5 | 2026-10-01 | Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array… |
CVE-2026-96658 | High | 8.8 | 2026-10-01 | A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on… |
CVE-2026-93546 | High | 8.8 | 2026-10-01 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persi… |
CVE-2026-73637 | High | 7.3 | 2026-10-01 | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to ca… |
CVE-2026-73636 | High | 8.1 | 2026-10-01 | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (… |
CVE-2026-63718 | High | 7.5 | 2026-10-01 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and… |
CVE-2026-63686 | High | 7.5 | 2026-10-01 | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to… |
CVE-2026-63292 | High | 7.5 | 2026-10-01 | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause… |
CVE-2026-63045 | High | 7.5 | 2026-10-01 | Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forw… |
CVE-2026-59685 | High | 7.5 | 2026-10-01 | Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apa… |
CVE-2026-56449 | High | 7.5 | 2026-10-01 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2… |
CVE-2026-56153 | High | 7.5 | 2026-10-01 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. |
CVE-2026-48005 | High | 7.5 | 2026-10-01 | Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remo… |
CVE-2026-14316 | High | 8.1 | 2026-10-01 | The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted… |
CVE-2026-13043 | High | 8.8 | 2026-10-01 | A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated… |
CVE-2026-12544 | High | 7.7 | 2026-10-01 | A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configurat… |
CVE-2026-12541 | High | 8.2 | 2026-10-01 | A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly… |
CVE-2026-12540 | High | 8.2 | 2026-10-01 | A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an under… |
CVE-2026-12423 | High | 7.5 | 2026-10-01 | A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in… |
CVE-2026-12405 | High | 8.8 | 2026-10-01 | A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a j… |
CVE-2026-103921 | High | 7.4 | 2026-10-01 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor() function… |
CVE-2026-101888 | High | 7.2 | 2026-10-01 | The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary… |
CVE-2026-79896 | High | 7.5 | 2026-10-01 | Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker c… |
CVE-2026-47360 | High | 7.5 | 2026-10-01 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookieRemove cha… |
CVE-2026-46729 | High | 7.5 | 2026-10-01 | NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 thro… |
CVE-2026-97297 | High | 7.6 | 2026-10-01 | Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions. |
CVE-2026-97284 | High | 8.8 | 2026-10-01 | Contributor PHP Object Injection in Icegram <= 3.1.31 versions. |
CVE-2026-97277 | High | 7.6 | 2026-10-01 | Subscriber Broken Access Control in Social Boost <= 3.6.2 versions. |
CVE-2026-97273 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. |
CVE-2026-97268 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. |
CVE-2026-97260 | High | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions. |
CVE-2026-95588 | High | 8.6 | 2026-10-01 | Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions. |