|
cve-2026-48908
|
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 |
CRITICAL
|
9.8
|
15.09%
|
cvelistv5 |
2026-07-08 |
|
cve-2026-48282
|
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted ... |
CRITICAL
|
10.0
|
42.39%
|
cvelistv5 |
2026-08-28 |
|
cve-2026-48908
|
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 |
CRITICAL
|
9.8
|
15.09%
|
cvelistv5 |
2026-07-08 |
|
cve-2026-48907
|
Widget Factory Joomla Content Editor Improper Access Control Vulnerability |
HIGH
|
N/A
|
16.19%
|
cvelistv5 |
2026-06-16 |
|
cve-2024-13982
|
CVE-2024-13982 |
HIGH
|
8.7
|
1.06%
|
cvelistv5 |
|
|
cve-2023-34362
|
Progress MOVEit Transfer SQL Injection Vulnerability |
CRITICAL
|
9.8
|
99.93%
|
cvelistv5 |
2023-06-02 |
|
cve-2022-25322
|
CVE-2022-25322 |
HIGH
|
N/A
|
8.35%
|
cvelistv5 |
|
|
cve-2020-5776
|
CVE-2020-5776 |
HIGH
|
N/A
|
14.72%
|
cvelistv5 |
|
|
cve-2020-28188
|
CVE-2020-28188 |
HIGH
|
N/A
|
96.60%
|
cvelistv5 |
|
|
cve-2026-1125
|
D-Link DIR-823X set_wifidog_settings sub_412E7C command injection |
HIGH
|
7.3
|
15.74%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-29927
|
nextjs: Authorization Bypass in Next.js Middleware |
CRITICAL
|
9.1
|
99.22%
|
cvelistv5 |
2026-07-11 |
|
cve-2024-5910
|
Palo Alto Networks Expedition Missing Authentication Vulnerability |
CRITICAL
|
9.3
|
91.78%
|
cvelistv5 |
2024-11-07 |
|
cve-2022-22963
|
SUSE CVE CVE-2022-22963 |
UNKNOWN
|
N/A
|
99.94%
|
cvelistv5 |
2025-02-16 |
|
cve-2017-12542
|
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. |
CRITICAL
|
10.0
|
99.29%
|
cvelistv5 |
2026-06-17 |
|
cve-2026-48282
|
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted ... |
CRITICAL
|
10.0
|
42.39%
|
cvelistv5 |
2026-08-28 |
|
cve-2026-8451
|
Insufficient input validation leading to memory overread |
HIGH
|
7.5
|
0.50%
|
cvelistv5 |
2026-07-01 |
|
cve-2024-36991
|
CVE-2024-36991 |
HIGH
|
7.5
|
13.01%
|
cvelistv5 |
|
|
cve-2024-13981
|
CVE-2024-13981 |
CRITICAL
|
10.0
|
0.90%
|
cvelistv5 |
|
|
cve-2026-45659
|
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
N/A
|
2.70%
|
cvelistv5 |
2026-07-01 |
|
cve-2026-8037
|
Progress LoadMaster Command Injection Vulnerability |
HIGH
|
N/A
|
77.36%
|
cvelistv5 |
2026-08-07 |
|
cve-2018-13315
|
Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request. |
CRITICAL
|
9.8
|
1.55%
|
cvelistv5 |
2026-06-17 |
|
cve-2026-45659
|
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
N/A
|
2.70%
|
cvelistv5 |
2026-07-01 |
|
cve-2026-52813
|
SUSE CVE CVE-2026-52813 |
UNKNOWN
|
N/A
|
1.11%
|
cvelistv5 |
2026-07-30 |
|
cve-2026-36356
|
The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint. |
CRITICAL
|
9.1
|
3.56%
|
cvelistv5 |
2026-07-05 |
|
cve-2025-34033
|
5VTechnologies Blue Angel Software Suite OS Command Injection |
HIGH
|
8.8
|
3.87%
|
cvelistv5 |
2026-06-17 |
|
cve-2023-22952
|
Multiple SugarCRM Products Remote Code Execution Vulnerability |
HIGH
|
N/A
|
80.14%
|
cvelistv5 |
2023-02-02 |
|
cve-2022-22954
|
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability |
CRITICAL
|
N/A
|
100.00%
|
cvelistv5 |
2022-04-14 |
|
cve-2021-35327
|
CVE-2021-35327 |
HIGH
|
N/A
|
1.38%
|
cvelistv5 |
|
|
cve-2021-32819
|
Remote code execution in squirrelly |
HIGH
|
8.0
|
58.29%
|
cvelistv5 |
2026-06-17 |
|
cve-2021-20090
|
Arcadyan Buffalo Firmware Path Traversal Vulnerability |
CRITICAL
|
9.8
|
99.98%
|
cvelistv5 |
2021-11-03 |
ndaal KEV