All CVEs — page 396 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• CRITICAL 10CVE-2026-71379public exploit available2026-09-29

  This vulnerability allows unauthenticated attackers to export arbitrary database tables, posing a significant risk to data integrity and confidentiality.

• HIGH 7.1CVE-2026-71302public exploit available2026-09-29
• LOW 3.5CVE-2026-71189public exploit available2026-09-29
• CRITICAL 9.1CVE-2026-70356public exploit available2026-09-29

  The flaw allows an attacker to upload and execute arbitrary PHP files, leading to remote code execution.

• LOW 3.7CVE-2026-69662public exploit available2026-09-29
• CRITICAL 9CVE-2026-68954public exploit available2026-09-29

  The vulnerability allows an attacker to inject time-based SQL queries, potentially leading to data theft or system compromise.

• CRITICAL 9CVE-2026-68068public exploit available2026-09-29

  This vulnerability allows an attacker to inject time-based SQL queries, potentially leading to data theft or system compromise.

• CRITICAL 9CVE-2026-63713public exploit available2026-09-29

  This vulnerability allows an attacker to inject time-based SQL queries, potentially leading to data exfiltration or system compromise.

• MEDIUM 4.7CVE-2026-102771public exploit available2026-09-29
• LOW 3.3CVE-2026-102621public exploit available2026-09-29
• CRITICAL 10CVE-2026-96587public exploit available2026-09-29

  The Viidure Android application hardcodes plaintext cloud storage credentials, allowing unauthorized access to critical storage.

• CRITICAL 9.8CVE-2026-94952public exploit available2026-09-29

  A stack-based buffer overflow vulnerability in TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030 allows attackers to execute arbitrary code via the web management interface.

• HIGH 7.5CVE-2026-94204public exploit available2026-09-29

  A cloud storage bucket misconfigured with public-read permissions allows unrestricted access to all stored data, exposing sensitive user records, dashcam footage, and firmware files to anyone on the internet.

• UNSCOREDCVE-2026-938532026-09-29
• MEDIUM 4.3CVE-2026-818422026-09-29
• MEDIUM 5.3CVE-2026-818412026-09-29
• UNSCOREDCVE-2026-102938public exploit available2026-09-29
• UNSCOREDCVE-2026-102937public exploit available2026-09-29
• UNSCOREDCVE-2026-102930public exploit available2026-09-29
• HIGH 7.8CVE-2026-102925public exploit available2026-09-29

  The flaw allows code execution by improperly handling shell-quoted paths in activation scripts, leading to potential command injection.

• MEDIUM 5.4CVE-2026-102904public exploit available2026-09-29
• LOW 3.3CVE-2026-102620public exploit available2026-09-29
• HIGH 7.5CVE-2026-102253public exploit available2026-09-29

  The flaw is an infinite loop in iperf3's UDP receive worker that causes a single crafted control message and 16-byte UDP datagram to permanently pin a receive thread at 100% CPU usage, making the server unusable until forcibly killed. This allows unauthenticated remote attackers to cause a denial of service by crashing the server's UDP receive functionality.

• HIGH 7.4CVE-2026-962742026-09-29
• HIGH 8.8CVE-2026-94953public exploit available2026-09-29

  A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030, allowing an attacker to potentially execute arbitrary code or cause a denial of service.