All CVEs — page 345 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• HIGH 7.6CVE-2026-104456public exploit available2026-10-02

  A second-order SQL injection vulnerability in YesWiki allows attackers to bypass read access controls by registering a specially crafted username containing double-quote characters, which then gets used unescaped in database queries. This enables attackers to read sensitive database contents and circumvent ACL restrictions.

• MEDIUM 5.3CVE-2026-104455public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104454public exploit available2026-10-02
• MEDIUM 5.4CVE-2026-104453public exploit available2026-10-02
• MEDIUM 5.4CVE-2026-104452public exploit available2026-10-02
• MEDIUM 4.3CVE-2026-104451public exploit available2026-10-02
• MEDIUM 6.5CVE-2026-104450public exploit available2026-10-02
• MEDIUM 6.5CVE-2026-104449public exploit available2026-10-02
• HIGH 8.1CVE-2026-104448public exploit available2026-10-02

  YesWiki before 4.6.7 is vulnerable to cross-site request forgery, allowing attackers to delete pages without proper authorization through a crafted link.

• HIGH 7.1CVE-2026-104447public exploit available2026-10-02
• MEDIUM 6.5CVE-2026-104446public exploit available2026-10-02
• HIGH 8.2CVE-2026-104445public exploit available2026-10-02

  YesWiki before 4.6.7 allows unauthenticated attackers to bypass authentication by sending signed Delete or Update activities, potentially deleting or overwriting other actors' federated entries.

• HIGH 7.1CVE-2026-104444public exploit available2026-10-02
• HIGH 8.1CVE-2026-104443public exploit available2026-10-02

  YesWiki before 4.6.7 allows any authenticated user to delete or forge arbitrary semantic triples, potentially leading to a site-wide authorization lockout.

• MEDIUM 5.8CVE-2026-104442public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104441public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104440public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104439public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104438public exploit available2026-10-02
• HIGH 7.4CVE-2026-104437public exploit available2026-10-02
• LOW 3.7CVE-2026-104436public exploit available2026-10-02
• HIGH 7.4CVE-2026-104435public exploit available2026-10-02
• MEDIUM 6.5CVE-2026-104434public exploit available2026-10-02
• MEDIUM 5.3CVE-2026-104432public exploit available2026-10-02
• HIGH 7.5CVE-2026-104431public exploit available2026-10-02

  Zebra node is vulnerable to denial of service attack where unauthenticated peers can stall Tokio workers by submitting expensive P2SH transactions that bypass standardness checks. This causes the node to become unresponsive as the verifier buffer saturates.