High-severity CVEs (page 66)
Page 66 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15275 | High | 7.5 | 2026-09-18 | The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'store_locatore_search_radius' parameter in all versions up… |
CVE-2026-14323 | High | 7.5 | 2026-09-18 | The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8… |
CVE-2026-12954 | High | 8.8 | 2026-09-18 | The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including, 1.23.0 via the `my_profile_update()`… |
CVE-2026-12384 | High | 8.8 | 2026-09-18 | Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Applicatio… |
CVE-2026-92619 | High | 7.2 | 2026-09-18 | The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the `wpbc_ajax_option_save` AJ… |
CVE-2026-89413 | High | 8.1 | 2026-09-18 | The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not proper… |
CVE-2026-93485 | High | 7.1 | 2026-09-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This… |
CVE-2026-90978 | High | 7.1 | 2026-09-18 | The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capa… |
CVE-2026-88825 | High | 8.8 | 2026-09-18 | The iGMS Direct Booking WordPress plugin before 2.0 does not authorise or escape its widget appearance settings, allowing unauthenticated users to store arbitr… |
CVE-2026-87775 | High | 8.6 | 2026-09-18 | The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action ava… |
CVE-2026-87774 | High | 8.6 | 2026-09-18 | The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action ava… |
CVE-2026-87771 | High | 8.6 | 2026-09-18 | The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions availab… |
CVE-2026-87770 | High | 8.6 | 2026-09-18 | The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action a… |
CVE-2026-87767 | High | 8.6 | 2026-09-18 | The wp shortcut link and advertisement baner WordPress plugin through 1.2.0 does not sanitize and escape a parameter before using it in a SQL query on an AJAX… |
CVE-2026-85127 | High | 8.8 | 2026-09-18 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files unauthenticated visitors may attach to its live ch… |
CVE-2026-85122 | High | 8.8 | 2026-09-18 | The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form t… |
CVE-2026-81810 | High | 7.2 | 2026-09-18 | The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of its AJAX actions, gating them only on… |
CVE-2026-18912 | High | 7.7 | 2026-09-18 | ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to exe… |
CVE-2026-18911 | High | 7.5 | 2026-09-18 | ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without prope… |
CVE-2026-17086 | High | 8.8 | 2026-09-18 | The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc… |
CVE-2026-93468 | High | 7.5 | 2026-09-18 | The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrar… |
CVE-2026-93371 | High | 8.3 | 2026-09-18 | A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/int… |
CVE-2026-93456 | High | 8.2 | 2026-09-18 | django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify… |
CVE-2026-93331 | High | 7.3 | 2026-09-18 | A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the comp… |
CVE-2026-93453 | High | 8.3 | 2026-09-18 | SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect re… |
CVE-2026-93452 | High | 7.5 | 2026-09-18 | snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination bu… |
CVE-2026-93450 | High | 7.5 | 2026-09-18 | go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no de… |
CVE-2026-85887 | High | 7.7 | 2026-09-18 | Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network. |
CVE-2026-83946 | High | 8.2 | 2026-09-18 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a… |
CVE-2026-93436 | High | 7.5 | 2026-09-17 | vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attacke… |
CVE-2026-93435 | High | 7.5 | 2026-09-17 | redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client pro… |
CVE-2026-87886 | High | 7.8 | 2026-09-17 | Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1… |
CVE-2026-85917 | High | 7.5 | 2026-09-17 | Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-78501 | High | 8.6 | 2026-09-17 | Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to… |
CVE-2026-68791 | High | 8.6 | 2026-09-17 | Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network. |
CVE-2026-93426 | High | 8.5 | 2026-09-17 | SigNoz versions 0.87.0 before 0.142.0 fail to escape user-supplied telemetry field-key names in the v5 query_range API, allowing authenticated users to inject… |
CVE-2026-54671 | High | 8.8 | 2026-09-17 | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, WeGIA maps InternoControle to an empty resource array in web/controle/control.php, and veri… |
CVE-2026-54647 | High | 7.2 | 2026-09-17 | CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.inc.php directly concatenates the administrator-controlled download_ex… |
CVE-2026-54646 | High | 7.2 | 2026-09-17 | CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER… |
CVE-2026-54634 | High | 7.3 | 2026-09-17 | Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reach… |
CVE-2026-54612 | High | 8.8 | 2026-09-17 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. From 1.0.0 until 1.0.8.5, saveGlobalElements() in admin… |
CVE-2026-54520 | High | 8.1 | 2026-09-17 | AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step imp… |
CVE-2026-54519 | High | 8.8 | 2026-09-17 | AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memor… |
CVE-2026-54506 | High | 7.6 | 2026-09-17 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, app/controller/user/profile.php accep… |
CVE-2026-50158 | High | 7.7 | 2026-09-17 | yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parame… |
CVE-2026-93393 | High | 8.1 | 2026-09-17 | A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that… |
CVE-2026-93382 | High | 8.8 | 2026-09-17 | Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-93381 | High | 8.8 | 2026-09-17 | Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute… |
CVE-2026-93377 | High | 8.8 | 2026-09-17 | Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandb… |
CVE-2026-93375 | High | 8.1 | 2026-09-17 | Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code… |
CVE-2026-86049 | High | 7.1 | 2026-09-17 | Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the Referer h… |
CVE-2026-77615 | High | 8.7 | 2026-09-17 | Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there i… |
CVE-2026-76154 | High | 7.3 | 2026-09-17 | A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in ano… |
CVE-2026-68537 | High | 7.5 | 2026-09-17 | `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct c… |
CVE-2026-68523 | High | 7.5 | 2026-09-17 | `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct c… |
CVE-2026-54916 | High | 8.8 | 2026-09-17 | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --… |
CVE-2026-54597 | High | 8.3 | 2026-09-17 | ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with mo… |
CVE-2026-54596 | High | 8.1 | 2026-09-17 | ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician o… |
CVE-2026-54510 | High | 7.1 | 2026-09-17 | Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrf_exempt_for_api_tokens() before_re… |
CVE-2026-54354 | High | 8.2 | 2026-09-17 | MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPos… |
CVE-2026-54339 | High | 7.7 | 2026-09-17 | Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feed_url to disc… |
CVE-2026-52483 | High | 8.8 | 2026-09-17 | The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(WVK.0)b46 allow authenticated users exe… |
CVE-2026-50277 | High | 7.5 | 2026-09-17 | dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace-cpp parses incoming W3C baggage headers without enforcing DD_TRACE_BA… |
CVE-2026-50275 | High | 7.5 | 2026-09-17 | The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtrace_deserialize_baggage in ext/distrib… |
CVE-2026-15815 | High | 8.8 | 2026-09-17 | Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic… |
CVE-2026-93337 | High | 7.8 | 2026-09-17 | NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation p… |
CVE-2026-92943 | High | 8.1 | 2026-09-17 | Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3… |
CVE-2026-54716 | High | 7.5 | 2026-09-17 | Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. In 3.7.0 and earlier, a POST request to /sources_to_targe… |
CVE-2026-54692 | High | 7.8 | 2026-09-17 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8… |
CVE-2026-50285 | High | 7.5 | 2026-09-17 | Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.go performs zstd decompression of attacker-control… |
CVE-2026-50125 | High | 7.5 | 2026-09-17 | MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the… |
CVE-2026-45726 | High | 7.6 | 2026-09-17 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an Impor… |
CVE-2026-45720 | High | 7.0 | 2026-09-17 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in internal/pkg/auth/interce… |
CVE-2026-92230 | High | 7.5 | 2026-09-17 | Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outli… |
CVE-2026-90997 | High | 7.4 | 2026-09-17 | A flaw was found in Keycloak. When deployed in stateless mode with MySQL or MariaDB, a mismatch in row-count semantics between the database driver and Keycloak… |
CVE-2026-54504 | High | 8.8 | 2026-09-17 | MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically star… |
CVE-2026-54253 | High | 8.2 | 2026-09-17 | TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in packages/server/routes/api.js passes the a… |
CVE-2026-54239 | High | 8.8 | 2026-09-17 | Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes th… |
CVE-2026-52851 | High | 7.1 | 2026-09-17 | Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated, non-readonly user with access to an object usable in a permission pair can su… |
CVE-2026-52727 | High | 7.2 | 2026-09-17 | lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinu… |
CVE-2026-19477 | High | 7.8 | 2026-09-17 | There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure o… |
CVE-2026-92926 | High | 7.3 | 2026-09-17 | A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preferen… |
CVE-2026-54446 | High | 8.1 | 2026-09-17 | NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Pr… |
CVE-2026-44236 | High | 7.1 | 2026-09-17 | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value du… |
CVE-2026-93292 | High | 8.5 | 2026-09-17 | SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate service_name and span_nam… |
CVE-2026-93203 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadv_bla_add_claim() is… |
CVE-2026-93201 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent memory cache_pos_decode(), cache_key_de… |
CVE-2026-93196 | High | 8.4 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token lifetime KASAN reports slab-use-after-fr… |
CVE-2026-93192 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue->active_job when v3d_fence_create() fails The run_job() callbacks fo… |
CVE-2026-93190 | High | 8.4 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count cros_typec_register_par… |
CVE-2026-93189 | High | 8.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to prevent use-after-free A driver's probe call… |
CVE-2026-93178 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup vddInd and vddcInd fie… |
CVE-2026-93177 | High | 7.3 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and… |
CVE-2026-93176 | High | 7.0 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpu_dm_plane_drm_plane_r… |
CVE-2026-93175 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpu_dm_crtc_reset_state()… |
CVE-2026-93170 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt han… |
CVE-2026-93165 | High | 7.7 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Fix memory overread in ring handler `max_response` and `senso… |
CVE-2026-93154 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Prevent userspace from deregistering the MRs… |
CVE-2026-93151 | High | 7.5 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix response resource leak on queue teardown When an nvme target with rdma tr… |
CVE-2026-93148 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject MEM_ALLOC BTF accesses past object bounds BTF struct walks relax the struct-s… |