All CVEs — page 316 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• LOW 3.3CVE-2026-105767public exploit available2026-10-05
• LOW 3.1CVE-2026-105766public exploit available2026-10-05
• MEDIUM 6.5CVE-2026-105696public exploit available2026-10-05
• MEDIUM 5.9CVE-2026-105695public exploit available2026-10-05
• MEDIUM 5.4CVE-2026-105694public exploit available2026-10-05
• MEDIUM 5.3CVE-2026-105693public exploit available2026-10-05
• MEDIUM 5.4CVE-2026-105692public exploit available2026-10-05
• CRITICAL 9.9CVE-2026-105691public exploit available2026-10-05

  The flaw allows an attacker to inject shell commands via SVG export, leading to remote code execution with the service's privileges.

• MEDIUM 5.9CVE-2026-105690public exploit available2026-10-05
• UNSCOREDCVE-2026-105689public exploit available2026-10-05
• MEDIUM 6.7CVE-2026-105688public exploit available2026-10-05
• MEDIUM 4.9CVE-2026-105687public exploit available2026-10-05
• UNSCOREDCVE-2026-105686public exploit available2026-10-05
• MEDIUM 4.3CVE-2026-105684public exploit available2026-10-05
• LOW 3.8CVE-2026-105683public exploit available2026-10-05
• LOW 2.7CVE-2026-105682public exploit available2026-10-05
• MEDIUM 6.5CVE-2026-105681public exploit available2026-10-05
• MEDIUM 6.5CVE-2026-105680public exploit available2026-10-05
• HIGH 7.3CVE-2026-105679public exploit available2026-10-05
• MEDIUM 4.3CVE-2026-105678public exploit available2026-10-05
• HIGH 7.2CVE-2026-105677public exploit available2026-10-05
• MEDIUM 4.9CVE-2026-105676public exploit available2026-10-05
• HIGH 7.5CVE-2026-105675public exploit available2026-10-05

  A Ghost CMS vulnerability allows staff users to discover secret tokens for pending invites, enabling privilege escalation by accepting higher-privilege invites. This affects versions 4.39.0 through 6.64.0.

• LOW 3.1CVE-2026-105652public exploit available2026-10-05
• HIGH 7.3CVE-2026-105651public exploit available2026-10-05