All CVEs — page 142 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• CRITICAL 9.8CVE-2026-956752026-09-22

  The flaw is an unauthenticated remote code execution vulnerability in D-Link DAP-1360 firmware versions 6.14 and earlier, allowing attackers to execute arbitrary commands as root via crafted web requests. This vulnerability is critical as it enables full device compromise and potential network pivoting.

• UNSCOREDCVE-2026-95674public exploit available2026-09-22
• UNSCOREDCVE-2026-95671public exploit available2026-09-22
• UNSCOREDCVE-2026-95667public exploit available2026-09-22
• MEDIUM 4.3CVE-2026-956662026-09-22
• UNSCOREDCVE-2026-95665public exploit available2026-09-22
• HIGH 7.3CVE-2026-954992026-09-22
• MEDIUM 4.3CVE-2026-95396public exploit available2026-09-22
• MEDIUM 6.5CVE-2026-933432026-09-22
• MEDIUM 5.4CVE-2026-933422026-09-22
• MEDIUM 4.3CVE-2026-933412026-09-22
• CRITICAL 9.8CVE-2026-127182026-09-22

  This vulnerability allows for Blind SQL Injection, enabling attackers to manipulate database queries and potentially gain unauthorized access to sensitive information.

• UNSCOREDCVE-2026-95661public exploit available2026-09-22
• UNSCOREDCVE-2026-95659public exploit available2026-09-22
• UNSCOREDCVE-2026-95658public exploit available2026-09-22
• HIGH 7.7CVE-2026-956192026-09-22
• MEDIUM 4.3CVE-2026-95273public exploit available2026-09-22
• LOW 3.7CVE-2026-95272public exploit available2026-09-22
• HIGH 7.3CVE-2026-95271public exploit available2026-09-22
• CRITICAL 9.8CVE-2026-936162026-09-22

  A directory traversal and file upload vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts on the Check Point Management Server, potentially leading to remote code execution.

• HIGH 8.6CVE-2026-757912026-09-22

  This vulnerability allows attackers to bypass authentication in the REST API of Zohocorp ManageEngine ADSelfService Plus versions before build 7001, enabling unauthorized access to sensitive features.

• LOW 3.7CVE-2026-95270public exploit available2026-09-22
• UNSCOREDCVE-2026-89420public exploit available2026-09-22
• UNSCOREDCVE-2026-87119public exploit available2026-09-22
• CRITICAL 9.8CVE-2026-748492026-09-22

  This vulnerability allows remote code execution in Zohocorp ManageEngine ADSelfService Plus versions before build 7001, posing a significant risk to system security.