|
cve-2026-16812
|
VeloCloud Orchestrator OS Command Injection |
CRITICAL
|
10.0
|
1.57%
|
cvelistv5 |
2026-07-28 |
|
cve-2026-58138
|
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators |
CRITICAL
|
9.8
|
9.26%
|
cvelistv5 |
2026-07-14 |
|
cve-2026-16812
|
VeloCloud Orchestrator OS Command Injection |
CRITICAL
|
10.0
|
1.57%
|
cvelistv5 |
2026-07-28 |
|
cve-2025-68686
|
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
HIGH
|
N/A
|
29.60%
|
cvelistv5 |
2026-07-27 |
|
cve-2026-16723
|
Remote Code Execution in fastjson 1.2.68–1.2.83 |
CRITICAL
|
9.0
|
15.99%
|
cvelistv5 |
2026-07-23 |
|
cve-2014-2383
|
CVE-2014-2383 |
HIGH
|
N/A
|
39.23%
|
cvelistv5 |
|
|
cve-2025-4283
|
SourceCodester/oretnom23 Stock Management System Login.php sql injection |
HIGH
|
7.3
|
0.60%
|
cvelistv5 |
2026-06-17 |
|
cve-2026-36356
|
The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint. |
CRITICAL
|
9.1
|
13.55%
|
cvelistv5 |
2026-07-05 |
|
cve-2016-3081
|
SUSE CVE CVE-2016-3081 |
UNKNOWN
|
N/A
|
93.35%
|
cvelistv5 |
2026-05-09 |
|
cve-2026-16232
|
Authentication Bypass in the SmartConsole Login Process Using an Application Token |
CRITICAL
|
9.8
|
72.05%
|
cvelistv5 |
2026-08-10 |
|
cve-2026-29059
|
Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly |
HIGH
|
7.5
|
2.94%
|
cvelistv5 |
2026-06-17 |
|
cve-2026-41940
|
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability |
CRITICAL
|
9.8
|
98.53%
|
cvelistv5 |
2026-04-30 |
|
cve-2026-3055
|
Insufficient input validation leading to memory overread |
CRITICAL
|
9.8
|
87.17%
|
cvelistv5 |
2026-06-17 |
|
cve-2026-24423
|
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability |
CRITICAL
|
N/A
|
88.18%
|
cvelistv5 |
2026-02-05 |
|
cve-2026-23760
|
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability |
CRITICAL
|
N/A
|
96.54%
|
cvelistv5 |
2026-01-26 |
|
cve-2026-21858
|
CVE-2026-21858 |
CRITICAL
|
10.0
|
78.45%
|
cvelistv5 |
|
|
cve-2026-21643
|
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. |
CRITICAL
|
9.8
|
94.08%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-9316
|
CVE-2025-9316 |
MEDIUM
|
6.9
|
36.29%
|
cvelistv5 |
|
|
cve-2025-69200
|
phpMyFAQ has unauthenticated config backup download via /api/setup/backup |
HIGH
|
7.5
|
2.17%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-64446
|
Fortinet FortiWeb Path Traversal Vulnerability |
CRITICAL
|
9.4
|
91.84%
|
cvelistv5 |
2025-11-14 |
|
cve-2025-58360
|
GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature |
HIGH
|
8.2
|
64.87%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-5777
|
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability |
CRITICAL
|
N/A
|
99.97%
|
cvelistv5 |
2025-07-10 |
|
cve-2025-55182
|
Meta React Server Components Remote Code Execution Vulnerability |
CRITICAL
|
N/A
|
99.80%
|
cvelistv5 |
2025-12-05 |
|
cve-2025-53118
|
Securden Unified PAM Authentication Bypass |
CRITICAL
|
9.8
|
30.53%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-47188
|
CVE-2025-47188 |
MEDIUM
|
6.5
|
50.24%
|
cvelistv5 |
|
|
cve-2025-4210
|
SUSE CVE CVE-2025-4210 |
UNKNOWN
|
N/A
|
1.84%
|
cvelistv5 |
2026-08-27 |
|
cve-2025-34068
|
Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters |
CRITICAL
|
9.3
|
0.90%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34059
|
Dahua Smart Cloud Gateway Registration Management Platform SQL Injection |
HIGH
|
8.7
|
0.47%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34057
|
Ruijie NBR Router Administrative Credential Disclosure |
HIGH
|
8.7
|
8.69%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34048
|
D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read |
HIGH
|
8.7
|
0.63%
|
cvelistv5 |
2026-06-17 |
ndaal KEV