All CVEs — page 1137 of 1220

The complete archive, 25 per page, newest first. 30483 records. Search instead.

• UNSCOREDCVE-2026-922542026-09-20
• UNSCOREDCVE-2026-922532026-09-20
• UNSCOREDCVE-2026-922522026-09-20
• CRITICAL 9.8CVE-2026-908172026-09-20

  This vulnerability allows unauthenticated attackers to execute arbitrary code on the REDCap server by manipulating HTTP requests and exploiting survey passthrough routing and data import logic.

• MEDIUM 6.5CVE-2026-94113public exploit available2026-09-20
• MEDIUM 6.8CVE-2026-94112public exploit available2026-09-20
• MEDIUM 6.6CVE-2026-94111public exploit available2026-09-20
• HIGH 8CVE-2026-94109public exploit available2026-09-20

  This vulnerability allows authenticated users to execute arbitrary code by injecting malicious FreeMarker templates, posing a significant risk to the application's security.

• MEDIUM 6.5CVE-2026-94108public exploit available2026-09-20
• HIGH 8.1CVE-2026-94107public exploit available2026-09-20

  The flaw in NivoCart through 2.4.0 allows attackers to predict password reset tokens, gaining administrative access without rate limiting or expiration.

• HIGH 8.8CVE-2026-94106public exploit available2026-09-20

  getID3 before 1.9.26 is vulnerable to OS command injection due to insufficient filename escaping, allowing attackers to inject arbitrary commands with process privileges.

• MEDIUM 5.3CVE-2026-94105public exploit available2026-09-20
• HIGH 8.8CVE-2026-94104public exploit available2026-09-20

  NivoCart through 2.4.0 allows attackers with view-only back-office access to upload PHP files, leading to remote code execution.

• HIGH 7.3CVE-2026-940042026-09-20
• CRITICAL 10CVE-2026-94003public exploit available2026-09-20

  The flaw is a stack-based buffer overflow in the get_css_path_from_uri function of the Comfast CF-N1-S 2.6.0.1 Web Management Interface, which can lead to remote code execution if exploited.

• HIGH 7.3CVE-2026-93997public exploit available2026-09-20
• HIGH 7.3CVE-2026-93980public exploit available2026-09-20
• HIGH 7.3CVE-2026-93979public exploit available2026-09-20
• HIGH 7.3CVE-2026-93978public exploit available2026-09-20
• LOW 3.5CVE-2026-93977public exploit available2026-09-20
• LOW 2.4CVE-2026-93976public exploit available2026-09-20
• LOW 2.4CVE-2026-93975public exploit available2026-09-20
• MEDIUM 6.2CVE-2026-865552026-09-20
• HIGH 7.3CVE-2026-93974public exploit available2026-09-20
• HIGH 7.3CVE-2026-93973public exploit available2026-09-20