High-severity CVEs (page 50)
Page 50 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-47520 | High | 7.8 | 2026-09-30 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful e… |
CVE-2026-47519 | High | 7.8 | 2026-09-30 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful e… |
CVE-2026-47516 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this… |
CVE-2026-47514 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kernel stack contents i… |
CVE-2026-47513 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read from kernel h… |
CVE-2026-47512 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read leading to ke… |
CVE-2026-47511 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds write. A successfu… |
CVE-2026-47510 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an integer overflow leading to an o… |
CVE-2026-47508 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect conversion between num… |
CVE-2026-47507 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds array access. A su… |
CVE-2026-47505 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of… |
CVE-2026-47504 | High | 7.8 | 2026-09-30 | NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible to type confusion… |
CVE-2026-47503 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write b… |
CVE-2026-47502 | High | 7.8 | 2026-09-30 | NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an integer overflow lea… |
CVE-2026-47501 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched m… |
CVE-2026-47500 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths… |
CVE-2026-47499 | High | 7.8 | 2026-09-30 | NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A succ… |
CVE-2026-47498 | High | 7.8 | 2026-09-30 | NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a speci… |
CVE-2026-47497 | High | 7.8 | 2026-09-30 | NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by send… |
CVE-2026-47496 | High | 7.3 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by… |
CVE-2026-47495 | High | 7.8 | 2026-09-30 | NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A succ… |
CVE-2026-47494 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerabil… |
CVE-2026-47493 | High | 7.8 | 2026-09-30 | NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which i… |
CVE-2026-47491 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources… |
CVE-2026-47489 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successfu… |
CVE-2026-103432 | High | 8.1 | 2026-09-30 | apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi)… |
CVE-2026-103231 | High | 7.3 | 2026-09-30 | A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the funct… |
CVE-2026-103230 | High | 7.3 | 2026-09-30 | A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_q… |
CVE-2026-103229 | High | 7.3 | 2026-09-30 | A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli… |
CVE-2026-100277 | High | 8.9 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature |
CVE-2026-100273 | High | 8.2 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution |
CVE-2026-100268 | High | 7.7 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates |
CVE-2026-100266 | High | 7.7 | 2026-09-30 | In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address |
CVE-2026-100262 | High | 7.6 | 2026-09-30 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates |
CVE-2026-100256 | High | 7.8 | 2026-09-30 | In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects |
CVE-2026-100255 | High | 8.1 | 2026-09-30 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset |
CVE-2026-100254 | High | 8.8 | 2026-09-30 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git con… |
CVE-2026-100253 | High | 8.8 | 2026-09-30 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL |
CVE-2026-62097 | High | 7.6 | 2026-09-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allo… |
CVE-2026-47097 | High | 7.5 | 2026-09-30 | AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bun… |
CVE-2026-18783 | High | 8.8 | 2026-09-30 | Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue… |
CVE-2026-103398 | High | 8.1 | 2026-09-30 | OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify arbitrary director… |
CVE-2026-103270 | High | 7.5 | 2026-09-30 | LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call en… |
CVE-2026-102717 | High | 7.5 | 2026-09-30 | MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash |
CVE-2026-101295 | High | 7.3 | 2026-09-30 | Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1)… |
CVE-2026-97293 | High | 8.5 | 2026-09-30 | Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions. |
CVE-2026-97289 | High | 7.1 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allow… |
CVE-2026-97287 | High | 8.5 | 2026-09-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows… |
CVE-2026-97272 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions. |
CVE-2026-97271 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
CVE-2026-97253 | High | 7.1 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue af… |
CVE-2026-97250 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. |
CVE-2026-97245 | High | 7.2 | 2026-09-30 | Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions. |
CVE-2026-97244 | High | 7.5 | 2026-09-30 | Contributor Path Traversal in Creator LMS <= 1.2.19 versions. |
CVE-2026-97241 | High | 7.5 | 2026-09-30 | Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions. |
CVE-2026-97240 | High | 7.5 | 2026-09-30 | Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions. |
CVE-2026-97237 | High | 7.1 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This… |
CVE-2026-97235 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions. |
CVE-2026-97197 | High | 7.5 | 2026-09-30 | Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions. |
CVE-2026-97077 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions. |
CVE-2026-97065 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions. |
CVE-2026-96838 | High | 8.8 | 2026-09-30 | Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification <= 2.3.1 versions. |
CVE-2026-96837 | High | 8.8 | 2026-09-30 | Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions. |
CVE-2026-96836 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions. |
CVE-2026-96833 | High | 7.2 | 2026-09-30 | Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions. |
CVE-2026-96832 | High | 7.2 | 2026-09-30 | Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions. |
CVE-2026-96831 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions. |
CVE-2026-96830 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions. |
CVE-2026-96828 | High | 7.6 | 2026-09-30 | Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions. |
CVE-2026-96827 | High | 7.6 | 2026-09-30 | Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions. |
CVE-2026-96823 | High | 7.5 | 2026-09-30 | Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions. |
CVE-2026-96820 | High | 7.1 | 2026-09-30 | Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions. |
CVE-2026-96819 | High | 7.1 | 2026-09-30 | Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions. |
CVE-2026-96818 | High | 7.5 | 2026-09-30 | Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions. |
CVE-2026-96817 | High | 8.2 | 2026-09-30 | Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions. |
CVE-2026-96816 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions. |
CVE-2026-96815 | High | 7.2 | 2026-09-30 | Custom role Privilege Escalation in Vitepos <= 3.5.0 versions. |
CVE-2026-96814 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions. |
CVE-2026-96352 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions. |
CVE-2026-96351 | High | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions. |
CVE-2026-96348 | High | 7.5 | 2026-09-30 | Unauthenticated Broken Access Control in Bookly <= 28.2 versions. |
CVE-2026-96346 | High | 7.6 | 2026-09-30 | Author SQL Injection in WP ERP <= 1.17.9 versions. |
CVE-2026-96345 | High | 7.6 | 2026-09-30 | Administrator SQL Injection in Estatik <= 4.3.5 versions. |
CVE-2026-96344 | High | 7.2 | 2026-09-30 | Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions. |
CVE-2026-96343 | High | 7.2 | 2026-09-30 | Custom role PHP Object Injection in WP ERP <= 1.17.9 versions. |
CVE-2026-95616 | High | 7.5 | 2026-09-30 | An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X… |
CVE-2026-95587 | High | 7.5 | 2026-09-30 | Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions. |
CVE-2026-95531 | High | 8.8 | 2026-09-30 | Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions. |
CVE-2026-94683 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions. |
CVE-2026-94678 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions. |
CVE-2026-94677 | High | 7.2 | 2026-09-30 | Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions. |
CVE-2026-94499 | High | 7.1 | 2026-09-30 | Subscriber Broken Access Control in FormGent <= 1.12.2 versions. |
CVE-2026-94178 | High | 7.5 | 2026-09-30 | Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions. |
CVE-2026-94177 | High | 8.5 | 2026-09-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injecti… |
CVE-2026-94123 | High | 7.5 | 2026-09-30 | Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions. |
CVE-2026-94122 | High | 7.2 | 2026-09-30 | Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions. |
CVE-2026-94121 | High | 8.8 | 2026-09-30 | Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions. |
CVE-2026-94120 | High | 7.5 | 2026-09-30 | Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions. |
CVE-2026-94115 | High | 8.5 | 2026-09-30 | Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions. |
CVE-2026-94082 | High | 7.6 | 2026-09-30 | Author SQL Injection in Quiz Cat <= 3.1.1 versions. |