All CVEs — page 6 of 1220

The complete archive, 25 per page, newest first. 30483 records. Search instead.

UNSCOREDCVE-2026-63194public exploit available2026-11-11
UNSCOREDCVE-2026-63192public exploit available2026-11-11
MEDIUM 4.8CVE-2026-126571public exploit available2026-11-11
HIGH 7.6CVE-2026-126570public exploit available2026-11-11
MEDIUM 5.4CVE-2026-126569public exploit available2026-11-11
MEDIUM 5.4CVE-2026-126567public exploit available2026-11-11
HIGH 7.1CVE-2026-126566public exploit available2026-11-11
MEDIUM 4.3CVE-2026-126565public exploit available2026-11-11
MEDIUM 5.4CVE-2026-126564public exploit available2026-11-11
MEDIUM 6.1CVE-2026-126563public exploit available2026-11-11
MEDIUM 4.3CVE-2026-126562public exploit available2026-11-11
HIGH 7.1CVE-2026-126561public exploit available2026-11-11
MEDIUM 5.4CVE-2026-126560public exploit available2026-11-11
MEDIUM 4.8CVE-2026-126559public exploit available2026-11-11
UNSCOREDCVE-2026-116645public exploit available2026-11-11
MEDIUM 4.3CVE-2026-1265462026-11-11
MEDIUM 4.3CVE-2026-126545public exploit available2026-11-11
MEDIUM 4.3CVE-2026-126544public exploit available2026-11-11
HIGH 7.5CVE-2026-126543public exploit available2026-11-11
CRITICAL 9.8CVE-2026-126542public exploit available2026-11-11
An authentication bypass flaw in WWBN AVideo allows unauthenticated attackers to impersonate any user—including administrators—by manipulating Hybridauth social login display names without needing a password. This occurs because the system incorrectly trusts the display name field as a unique username during OAuth-based login, ignoring email verification.
HIGH 8.1CVE-2026-126541public exploit available2026-11-11
HIGH 8.1CVE-2026-126539public exploit available2026-11-11
HIGH 7.4CVE-2026-126499public exploit available2026-11-11
MEDIUM 5.4CVE-2026-126498public exploit available2026-11-11
HIGH 7.8CVE-2026-126497public exploit available2026-11-11