|
cve-2026-8054
|
Unauthenticated SQL Injection in dotCMS Publish Audit API |
CRITICAL
|
10.0
|
1.62%
|
cvelistv5 |
2026-06-17 |
|
cve-2023-6567
|
CVE-2023-6567 |
CRITICAL
|
9.8
|
51.39%
|
cvelistv5 |
|
|
cve-2026-20245
|
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability |
HIGH
|
7.8
|
25.32%
|
cvelistv5 |
2026-06-09 |
|
cve-2026-12569
|
PTC Windchill and FlexPLM Improper Input Validation Vulnerability |
CRITICAL
|
N/A
|
46.05%
|
cvelistv5 |
2026-06-25 |
|
cve-2026-20230
|
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability |
HIGH
|
8.6
|
88.20%
|
cvelistv5 |
2026-06-25 |
|
cve-2026-12569
|
PTC Windchill and FlexPLM Improper Input Validation Vulnerability |
CRITICAL
|
N/A
|
46.05%
|
cvelistv5 |
2026-06-25 |
|
cve-2026-20230
|
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability |
HIGH
|
8.6
|
88.20%
|
cvelistv5 |
2026-06-25 |
|
cve-2025-67038
|
Lantronix EDS5000 Code Injection Vulnerability |
CRITICAL
|
9.3
|
19.26%
|
cvelistv5 |
2026-06-23 |
|
cve-2020-1054
|
Microsoft Win32k Privilege Escalation Vulnerability |
HIGH
|
7.0
|
54.16%
|
cvelistv5 |
2021-11-03 |
|
cve-2026-9082
|
drupal: Drupal core: SQL Injection vulnerability allows data manipulation |
CRITICAL
|
9.8
|
15.70%
|
cvelistv5 |
2026-06-28 |
|
cve-2026-8398
|
Daemon Tools Lite Embedded Malicious Code Vulnerability |
HIGH
|
N/A
|
0.96%
|
cvelistv5 |
2026-05-27 |
|
cve-2026-8206
|
Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password' |
CRITICAL
|
9.8
|
0.77%
|
cvelistv5 |
2026-07-22 |
|
cve-2026-7473
|
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability |
HIGH
|
N/A
|
0.65%
|
cvelistv5 |
2026-06-09 |
|
cve-2026-6973
|
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability |
HIGH
|
N/A
|
2.54%
|
cvelistv5 |
2026-05-07 |
|
cve-2026-54420
|
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability |
HIGH
|
N/A
|
0.81%
|
cvelistv5 |
2026-06-15 |
|
cve-2026-53435
|
jenkins: Jenkins: Arbitrary code execution via deserialization of attacker-controlled configuration |
HIGH
|
8.8
|
2.16%
|
cvelistv5 |
2026-09-04 |
|
cve-2026-5281
|
chromium-browser: Use after free in Dawn |
CRITICAL
|
9.0
|
0.70%
|
cvelistv5 |
2026-06-28 |
|
cve-2026-50751
|
Check Point Security Gateway Improper Authentication Vulnerability |
CRITICAL
|
N/A
|
6.30%
|
cvelistv5 |
2026-06-08 |
|
cve-2026-5027
|
Langflow - Path Traversal Arbitrary File Write via upload_user_file |
HIGH
|
8.8
|
4.76%
|
cvelistv5 |
2026-08-18 |
|
cve-2026-48907
|
Widget Factory Joomla Content Editor Improper Access Control Vulnerability |
HIGH
|
N/A
|
16.19%
|
cvelistv5 |
2026-06-16 |
|
cve-2026-48172
|
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability |
HIGH
|
N/A
|
1.01%
|
cvelistv5 |
2026-05-26 |
|
cve-2026-48027
|
Nx Console Embedded Malicious Code Vulnerability |
CRITICAL
|
N/A
|
1.34%
|
cvelistv5 |
2026-05-27 |
|
cve-2026-45498
|
Microsoft Defender Denial of Service Vulnerability |
HIGH
|
N/A
|
1.27%
|
cvelistv5 |
2026-05-20 |
|
cve-2026-45321
|
SUSE CVE CVE-2026-45321 |
UNKNOWN
|
N/A
|
1.05%
|
cvelistv5 |
2026-05-29 |
|
cve-2026-45247
|
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability |
HIGH
|
N/A
|
2.08%
|
cvelistv5 |
2026-06-03 |
|
cve-2026-44742
|
Postorius: Postorius: Cross-Site Scripting via unescaped HTML in message subject |
MEDIUM
|
5.4
|
0.33%
|
cvelistv5 |
2026-06-28 |
|
cve-2026-42897
|
Microsoft Exchange Server Cross-Site Scripting Vulnerability |
HIGH
|
N/A
|
0.52%
|
cvelistv5 |
2026-05-15 |
|
cve-2026-42271
|
litellm: LiteLLM: Authenticated command execution via MCP stdio test endpoints |
HIGH
|
8.8
|
12.75%
|
cvelistv5 |
2026-06-30 |
|
cve-2026-42208
|
LiteLLM: LiteLLM: Unauthorized data access and modification via SQL injection |
CRITICAL
|
9.8
|
5.77%
|
cvelistv5 |
2026-07-11 |
|
cve-2026-41940
|
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability |
CRITICAL
|
9.8
|
98.53%
|
cvelistv5 |
2026-04-30 |
ndaal KEV