|
cve-2026-42271
|
BerriAI LiteLLM Command Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-06-08 |
|
cve-2026-34910
|
Ubiquiti UniFi OS Improper Input Validation Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-06-23 |
|
cve-2026-2699
|
CVE-2026-2699 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
|
|
cve-2026-2652
|
mlflow: mlflow: Authentication bypass allows unauthorized job management and data injection |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-07-08 |
|
cve-2026-20253
|
Splunk Enterprise Missing Authentication for Critical Function Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-18 |
|
cve-2026-1547
|
Totolink A7000R cstecgi.cgi setUnloadUserData command injection |
MEDIUM
|
6.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2026-1207
|
Django: Django: SQL Injection via RasterField band index parameter |
HIGH
|
8.3
|
N/A
|
cvelistv5 |
2026-07-15 |
|
cve-2025-60702
|
CVE-2025-60702 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
|
|
cve-2025-10164
|
CVE-2025-10164 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
|
|
cve-2024-12912
|
CVE-2024-12912 |
HIGH
|
7.2
|
N/A
|
cvelistv5 |
|
|
cve-2021-27691
|
CVE-2021-27691 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2019-12725
|
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters. |
CRITICAL
|
9.8
|
89.85%
|
cvelistv5 |
2026-06-17 |
|
cve-2026-21509
|
Microsoft Office Security Feature Bypass Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-26 |
|
cve-2026-1340
|
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-08 |
|
cve-2026-1281
|
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-29 |
|
cve-2025-53770
|
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-07-20 |
|
cve-2023-28771
|
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2023-05-31 |
|
cve-2026-21509
|
Microsoft Office Security Feature Bypass Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-26 |
|
cve-2026-1281
|
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-29 |
|
cve-2025-53770
|
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-07-20 |
|
cve-2023-28771
|
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2023-05-31 |
|
cve-2026-1340
|
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-08 |
|
cve-2026-21509
|
Microsoft Office Security Feature Bypass Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-26 |
|
cve-2026-1340
|
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-08 |
|
cve-2026-1281
|
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-29 |
|
cve-2025-53770
|
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-07-20 |
|
cve-2023-28771
|
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2023-05-31 |
|
cve-2025-53770
|
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-07-20 |
|
cve-2026-21509
|
Microsoft Office Security Feature Bypass Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-26 |
|
cve-2023-28771
|
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2023-05-31 |
ndaal KEV