High-severity CVEs (page 62)
Page 62 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-13552 | High | 7.3 | 2026-06-29 | A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_amenities/controller.p… |
CVE-2026-22078 | High | 7.3 | 2026-06-29 | Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC cha… |
CVE-2026-13551 | High | 7.3 | 2026-06-29 | A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /editBaptism… |
CVE-2026-13550 | High | 7.3 | 2026-06-29 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /delbaptism.p… |
CVE-2026-13547 | High | 7.3 | 2026-06-29 | A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUp… |
CVE-2026-13546 | High | 7.3 | 2026-06-29 | A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API Endpoint. Perfo… |
CVE-2026-13545 | High | 8.8 | 2026-06-29 | A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Parameter Handler… |
CVE-2026-13539 | High | 8.8 | 2026-06-29 | A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the function sub_407504 of the file /cgi-bin/wireless.cgi of the… |
CVE-2026-10083 | High | 7.5 | 2026-06-29 | The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a Stored Cross-Si… |
CVE-2025-2902 | High | 8.3 | 2026-06-29 | Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E59… |
CVE-2026-13528 | High | 7.3 | 2026-06-29 | A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the function generateUploadPath of the fil… |
CVE-2026-13527 | High | 7.3 | 2026-06-29 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /preview4.php… |
CVE-2026-13526 | High | 7.3 | 2026-06-29 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_class.php. This manipulation o… |
CVE-2026-13521 | High | 7.3 | 2026-06-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functionality of the… |
CVE-2026-13519 | High | 8.8 | 2026-06-29 | A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of… |
CVE-2026-13518 | High | 8.8 | 2026-06-29 | A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the arg… |
CVE-2026-13517 | High | 8.8 | 2026-06-29 | A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulat… |
CVE-2026-13516 | High | 8.8 | 2026-06-29 | A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performin… |
CVE-2026-13515 | High | 8.8 | 2026-06-29 | A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such ma… |
CVE-2026-13500 | High | 7.3 | 2026-06-28 | A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of… |
CVE-2026-13498 | High | 7.3 | 2026-06-28 | A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of the compon… |
CVE-2026-13488 | High | 7.3 | 2026-06-28 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown functionality o… |
CVE-2026-13487 | High | 7.3 | 2026-06-28 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive.php. The manipulat… |
CVE-2026-13486 | High | 7.3 | 2026-06-28 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Execu… |
CVE-2026-13485 | High | 7.3 | 2026-06-28 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a mani… |
CVE-2026-10646 | High | 7.4 | 2026-06-28 | Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) passes a pointer to a stack-allocated state object (struct getaddrinfo… |
CVE-2026-58056 | High | 7.6 | 2026-06-28 | RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not… |
CVE-2026-58050 | High | 7.0 | 2026-06-28 | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof… |
CVE-2026-58049 | High | 8.6 | 2026-06-28 | FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and v… |
CVE-2026-8095 | High | 8.1 | 2026-06-28 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due… |
CVE-2026-10643 | High | 8.7 | 2026-06-28 | Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffe… |
CVE-2026-49416 | High | 7.8 | 2026-06-27 | The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buffer size calculation… |
CVE-2026-49414 | High | 7.8 | 2026-06-27 | The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. A… |
CVE-2026-49417 | High | 7.0 | 2026-06-27 | Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be re… |
CVE-2026-49413 | High | 7.1 | 2026-06-27 | The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set a… |
CVE-2026-49412 | High | 7.8 | 2026-06-27 | The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the lock. During this… |
CVE-2026-45258 | High | 7.8 | 2026-06-27 | dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could over… |
CVE-2026-10820 | High | 8.1 | 2026-06-27 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.16.17 does not verify tha… |
CVE-2023-37524 | High | 7.7 | 2026-06-27 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reach… |
CVE-2026-56414 | High | 7.2 | 2026-06-26 | A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persisten… |
CVE-2026-55975 | High | 7.2 | 2026-06-26 | A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device's certificate generation inte… |
CVE-2026-33560 | High | 7.1 | 2026-06-26 | The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which allows authenticated users to upload fil… |
CVE-2026-31928 | High | 8.1 | 2026-06-26 | The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initi… |
CVE-2026-55069 | High | 8.7 | 2026-06-26 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kest… |
CVE-2026-49984 | High | 7.7 | 2026-06-26 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.23, the local internal-storage backend validates user-supplied paths for… |
CVE-2026-45807 | High | 7.7 | 2026-06-26 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, several Kestra API endpoints accept a kestra:// URI from the client… |
CVE-2026-36478 | High | 7.5 | 2026-06-26 | An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a denial of service via the DnsServerApp.exe, DnsServerApp.dll, Technitiu… |
CVE-2026-54353 | High | 8.5 | 2026-06-26 | Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS… |
CVE-2026-54351 | High | 8.2 | 2026-06-26 | Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request… |
CVE-2026-52884 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does NOT canonicalize the path before checking. It uses a prefix-ba… |
CVE-2026-50136 | High | 7.4 | 2026-06-26 | Budibase is an open-source low-code platform. Prior to 3.39.3, the application server exposes an unauthenticated endpoint that generates S3 PutObject presigned… |
CVE-2026-50132 | High | 7.3 | 2026-06-26 | Budibase is an open-source low-code platform. Prior to 3.39.0, `GET /api/chat-links/:instance/:token/handoff` is a public endpoint (no auth required) that perf… |
CVE-2026-48800 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xml is read… |
CVE-2026-48778 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::va… |
CVE-2026-46710 | High | 7.8 | 2026-06-26 | Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer… |
CVE-2026-46604 | High | 7.5 | 2026-06-26 | The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset. |
CVE-2026-38641 | High | 7.5 | 2026-06-26 | An issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafted shared library. |
CVE-2026-38639 | High | 7.5 | 2026-06-26 | An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of Service (DoS) via parsing a crafted inpu… |
CVE-2026-55189 | High | 7.7 | 2026-06-26 | RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, when the FTP frontend is enabled, the FTP read and probe ha… |
CVE-2026-55188 | High | 8.2 | 2026-06-26 | RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, RustFS contains an authorization bypass in the bucket repli… |
CVE-2026-53322 | High | 8.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_co… |
CVE-2026-53303 | High | 7.1 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() In f2fs_sbi_show()… |
CVE-2026-53300 | High | 7.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The AI-generated review reported a potentia… |
CVE-2026-53296 | High | 7.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error On probe error, free the previously o… |
CVE-2026-53294 | High | 7.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: don't free the reused channel The RX channel can be aliased to the… |
CVE-2026-53290 | High | 7.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/eustall: Fix drm_dev_put called before stream disable in close In xe_eu_stall_stre… |
CVE-2026-53286 | High | 7.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix double free and use-after-free in aux device error paths When auxiliary_device_… |
CVE-2026-53284 | High | 7.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes [WARNING] With extra… |
CVE-2026-53281 | High | 8.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d ("i… |
CVE-2026-52784 | High | 8.8 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a CSRF on TARGET through /users/:id via POST parameter… |
CVE-2026-52783 | High | 8.2 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint use… |
CVE-2026-49991 | High | 8.6 | 2026-06-26 | RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.4, authenticated users with only PutObject permission on their own bucket can exploi… |
CVE-2026-47193 | High | 7.5 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the journal diff endpoint discloses hidden historical field valu… |
CVE-2026-32833 | High | 8.8 | 2026-06-26 | Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary… |
CVE-2026-47220 | High | 7.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVER_NAME(X:Y… |
CVE-2026-13372 | High | 7.2 | 2026-06-26 | Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authen… |
CVE-2026-56876 | High | 8.1 | 2026-06-26 | extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like… |
CVE-2026-55441 | High | 8.6 | 2026-06-26 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through… |
CVE-2026-54341 | High | 7.5 | 2026-06-26 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in Drago… |
CVE-2026-48743 | High | 7.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a down… |
CVE-2026-48044 | High | 7.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability… |
CVE-2026-48042 | High | 7.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object… |
CVE-2026-57518 | High | 8.8 | 2026-06-26 | Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privilege… |
CVE-2026-57231 | High | 7.5 | 2026-06-26 | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no va… |
CVE-2026-56663 | High | 8.5 | 2026-06-26 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.52, an authenticated us… |
CVE-2026-55677 | High | 7.5 | 2026-06-26 | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the… |
CVE-2026-9640 | High | 7.2 | 2026-06-26 | A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restrict… |
CVE-2026-5757 | High | 7.5 | 2026-06-26 | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap m… |
CVE-2026-47214 | High | 7.1 | 2026-06-26 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backen… |
CVE-2026-45195 | High | 7.8 | 2026-06-26 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted r… |
CVE-2026-21734 | High | 7.7 | 2026-06-26 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader co… |
CVE-2026-12411 | High | 8.4 | 2026-06-26 | Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's cust… |
CVE-2026-0828 | High | 7.5 | 2026-06-26 | Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and t… |
CVE-2026-57667 | High | 8.5 | 2026-06-26 | Sales Representative SQL Injection in Groundhogg <= 4.5 versions. |
CVE-2026-57663 | High | 8.5 | 2026-06-26 | Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions. |
CVE-2026-57662 | High | 8.5 | 2026-06-26 | Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. |
CVE-2026-57659 | High | 8.8 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions. |
CVE-2026-57655 | High | 8.2 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions. |
CVE-2026-57653 | High | 8.5 | 2026-06-26 | Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. |
CVE-2026-57647 | High | 7.5 | 2026-06-26 | Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions. |