High-severity CVEs (page 69)
Page 69 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-81477 | High | 7.2 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote a… |
CVE-2026-81476 | High | 8.1 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command In… |
CVE-2026-81475 | High | 8.1 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated att… |
CVE-2026-81440 | High | 7.3 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remo… |
CVE-2026-92903 | High | 8.2 | 2026-09-17 | Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are exe… |
CVE-2026-81474 | High | 7.8 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local acc… |
CVE-2026-66269 | High | 7.3 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… |
CVE-2026-78428 | High | 8.0 | 2026-09-17 | For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when mu… |
CVE-2026-86320 | High | 7.8 | 2026-09-17 | A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious… |
CVE-2026-87963 | High | 8.6 | 2026-09-17 | The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it be… |
CVE-2026-86801 | High | 8.8 | 2026-09-17 | The To Do List Member WordPress plugin from 1.4 through 1.6 ships a file upload endpoint that does not load WordPress and therefore applies no authentication… |
CVE-2026-91014 | High | 7.1 | 2026-09-17 | The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back… |
CVE-2026-88904 | High | 8.8 | 2026-09-17 | The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the caller against a capability taken from… |
CVE-2026-88792 | High | 8.8 | 2026-09-17 | The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing… |
CVE-2026-87786 | High | 8.8 | 2026-09-17 | The Dewa Kirim WordPress plugin through 1.0.0 does not escape delivery coordinates submitted at checkout before outputting them inside an inline script, allow… |
CVE-2026-85130 | High | 8.8 | 2026-09-17 | The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later outpu… |
CVE-2026-85128 | High | 7.5 | 2026-09-17 | The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chos… |
CVE-2025-15697 | High | 7.1 | 2026-09-17 | The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allow… |
CVE-2026-87935 | High | 8.1 | 2026-09-17 | The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the admin_request_handler functio… |
CVE-2026-25294 | High | 7.4 | 2026-09-17 | Transient DOS while parsing frame during channel usage. |
CVE-2026-25290 | High | 7.8 | 2026-09-17 | Memory Corruption when validating large data buffers from external sources using addition to check buffer length. |
CVE-2026-25284 | High | 7.3 | 2026-09-17 | Information Disclosure when a pointer is reused after being deallocated. |
CVE-2026-25283 | High | 8.8 | 2026-09-17 | Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. |
CVE-2026-25282 | High | 7.9 | 2026-09-17 | Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. |
CVE-2026-25281 | High | 7.4 | 2026-09-17 | Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. |
CVE-2026-25280 | High | 7.8 | 2026-09-17 | Memory corruption when processing escape handling flow with insufficient user buffer sizes. |
CVE-2026-25278 | High | 7.8 | 2026-09-17 | Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying. |
CVE-2026-25275 | High | 7.5 | 2026-09-17 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
CVE-2026-24081 | High | 7.4 | 2026-09-17 | Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. |
CVE-2026-24075 | High | 7.8 | 2026-09-17 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
CVE-2026-24074 | High | 7.8 | 2026-09-17 | Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. |
CVE-2026-24073 | High | 7.8 | 2026-09-17 | Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. |
CVE-2025-59607 | High | 7.8 | 2026-09-17 | Memory Corruption when copying large input data exceeds normal allocation limits. |
CVE-2026-92838 | High | 7.8 | 2026-09-17 | A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from… |
CVE-2026-81546 | High | 7.7 | 2026-09-17 | The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading t… |
CVE-2026-65388 | High | 7.5 | 2026-09-16 | A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim'… |
CVE-2026-61596 | High | 7.1 | 2026-09-16 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object autho… |
CVE-2026-92599 | High | 7.5 | 2026-09-16 | joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6 are vulnerable to regular expression denial of service in the `Joi.string().is… |
CVE-2026-92596 | High | 7.5 | 2026-09-16 | Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of servi… |
CVE-2026-92594 | High | 7.5 | 2026-09-16 | Craft CMS 5.0.0-RC1 through versions before 5.11.0 incorrectly authorize the GraphQL draftCreator and revisionCreator fields: instead of requiring the user-dat… |
CVE-2026-92593 | High | 8.8 | 2026-09-16 | Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirectUrl() -> View::renderObjectTemplate()… |
CVE-2026-92592 | High | 8.8 | 2026-09-16 | Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used… |
CVE-2026-92582 | High | 7.1 | 2026-09-16 | AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery. objects/videoAddNew.json.php disables AVideo's automatic CSRF… |
CVE-2026-92580 | High | 8.8 | 2026-09-16 | In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In plugin/CloneSite/cloneClient.json.php (line ~270) the stored SSH… |
CVE-2026-92578 | High | 8.1 | 2026-09-16 | WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a valid login credential through two ind… |
CVE-2026-92577 | High | 7.5 | 2026-09-16 | In AVideo through 29.0, the API get_api_video endpoint contains a broken access control vulnerability in the clean_title branch that returns user-group-restric… |
CVE-2026-92576 | High | 8.6 | 2026-09-16 | HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block… |
CVE-2026-85469 | High | 8.0 | 2026-09-16 | A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docker-manifest-action` used in the release… |
CVE-2026-61592 | High | 7.4 | 2026-09-16 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE sessions were keyed… |
CVE-2026-61591 | High | 8.1 | 2026-09-16 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for views that opt into… |
CVE-2026-92816 | High | 7.8 | 2026-09-16 | ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing attackers to write files to arbitrary paths outside the output direct… |
CVE-2026-92815 | High | 7.5 | 2026-09-16 | changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attackers to access internal addresses. Atta… |
CVE-2026-92806 | High | 8.1 | 2026-09-16 | phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in a… |
CVE-2026-92804 | High | 7.1 | 2026-09-16 | Nango through 0.70.4 fails to validate caller-supplied connection configuration values interpolated into provider token and proxy URL templates. Authenticated… |
CVE-2026-92801 | High | 8.8 | 2026-09-16 | cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatc… |
CVE-2026-92796 | High | 8.8 | 2026-09-16 | Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to exe… |
CVE-2026-92794 | High | 7.5 | 2026-09-16 | OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supp… |
CVE-2026-92793 | High | 8.1 | 2026-09-16 | GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by appen… |
CVE-2026-92792 | High | 7.5 | 2026-09-16 | OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a test_purpose key, causing the Fallbac… |
CVE-2026-92791 | High | 7.5 | 2026-09-16 | Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/{tag} endpoint, allowing unauthenticated attackers to traverse outside the configur… |
CVE-2026-92788 | High | 8.8 | 2026-09-16 | Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can… |
CVE-2026-92786 | High | 7.8 | 2026-09-16 | LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP pr… |
CVE-2026-92785 | High | 8.1 | 2026-09-16 | Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attack… |
CVE-2026-92784 | High | 7.5 | 2026-09-16 | @refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data prov… |
CVE-2026-92783 | High | 8.1 | 2026-09-16 | Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control rel… |
CVE-2026-92782 | High | 8.1 | 2026-09-16 | Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from oth… |
CVE-2026-92780 | High | 8.8 | 2026-09-16 | KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality… |
CVE-2026-92779 | High | 7.6 | 2026-09-16 | Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content blo… |
CVE-2026-92776 | High | 8.1 | 2026-09-16 | Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to access pages sharing a prefix with autho… |
CVE-2026-92773 | High | 7.1 | 2026-09-16 | Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can c… |
CVE-2026-92772 | High | 7.1 | 2026-09-16 | Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users… |
CVE-2026-92763 | High | 8.1 | 2026-09-16 | Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with onl… |
CVE-2026-92762 | High | 8.8 | 2026-09-16 | Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks… |
CVE-2026-92761 | High | 8.8 | 2026-09-16 | WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-on… |
CVE-2026-92753 | High | 7.1 | 2026-09-16 | PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated… |
CVE-2026-92752 | High | 8.3 | 2026-09-16 | metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissi… |
CVE-2026-92751 | High | 8.1 | 2026-09-16 | CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated oper… |
CVE-2026-92749 | High | 8.1 | 2026-09-16 | SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key… |
CVE-2026-92748 | High | 8.8 | 2026-09-16 | BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbi… |
CVE-2026-76425 | High | 7.6 | 2026-09-16 | A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This v… |
CVE-2026-76424 | High | 7.2 | 2026-09-16 | A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vul… |
CVE-2026-76413 | High | 8.2 | 2026-09-16 | A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, rem… |
CVE-2026-76412 | High | 8.5 | 2026-09-16 | A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics… |
CVE-2026-76409 | High | 8.8 | 2026-09-16 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive inter… |
CVE-2026-63506 | High | 8.8 | 2026-09-16 | Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID an… |
CVE-2026-20360 | High | 8.8 | 2026-09-16 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive inter… |
CVE-2026-20352 | High | 8.6 | 2026-09-16 | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS… |
CVE-2026-20344 | High | 8.8 | 2026-09-16 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection att… |
CVE-2026-20343 | High | 7.5 | 2026-09-16 | A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded d… |
CVE-2026-20342 | High | 7.7 | 2026-09-16 | A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an… |
CVE-2026-20340 | High | 8.8 | 2026-09-16 | A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. T… |
CVE-2026-20336 | High | 8.8 | 2026-09-16 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall T… |
CVE-2026-20335 | High | 8.1 | 2026-09-16 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall T… |
CVE-2026-20334 | High | 8.4 | 2026-09-16 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall T… |
CVE-2026-20333 | High | 8.8 | 2026-09-16 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall T… |
CVE-2026-20323 | High | 8.3 | 2026-09-16 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated… |
CVE-2026-20300 | High | 7.1 | 2026-09-16 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerabilit… |
CVE-2026-20295 | High | 8.6 | 2026-09-16 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated… |
CVE-2026-20250 | High | 8.6 | 2026-09-16 | A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De… |
CVE-2026-20249 | High | 8.6 | 2026-09-16 | A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Applian… |