All CVEs — page 740 of 854

The complete archive, 25 per page, newest first. 21350 records. Search instead.

• MEDIUM 5.5CVE-2026-96273public exploit available2026-09-23
• HIGH 7.5CVE-2026-96272public exploit available2026-09-23

  ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint that allows unauthenticated attackers to extract user credentials and admin password hashes through time-based blind SQL injection techniques, enabling account takeover.

• HIGH 7.1CVE-2026-96271public exploit available2026-09-23
• HIGH 7.3CVE-2026-95925public exploit available2026-09-23
• HIGH 7.3CVE-2026-95924public exploit available2026-09-23
• MEDIUM 5.5CVE-2026-95897public exploit available2026-09-23
• MEDIUM 6.3CVE-2026-95868public exploit available2026-09-23
• MEDIUM 6.3CVE-2026-95833public exploit available2026-09-23
• MEDIUM 6.3CVE-2026-95830public exploit available2026-09-23
• MEDIUM 6.3CVE-2026-95829public exploit available2026-09-23
• HIGH 7.2CVE-2026-943672026-09-23
• MEDIUM 6.2CVE-2026-929302026-09-23
• MEDIUM 5.3CVE-2026-929292026-09-23
• MEDIUM 6.5CVE-2026-929282026-09-23
• MEDIUM 4.3CVE-2026-95828public exploit available2026-09-22
• MEDIUM 6.3CVE-2026-95820public exploit available2026-09-22
• HIGH 7.5CVE-2026-61685public exploit available2026-09-22

  ReactPress allows unauthenticated attackers to inject SQL through API endpoints by using unsanitized HTTP query parameter names as SQL column identifiers, potentially leading to unauthorized data access.

• MEDIUM 6.5CVE-2026-57576public exploit available2026-09-22
• HIGH 7.4CVE-2026-181762026-09-22
• LOW 3.7CVE-2026-181732026-09-22
• HIGH 7.4CVE-2026-181722026-09-22
• MEDIUM 6.5CVE-2026-181702026-09-22
• CRITICAL 9.9CVE-2026-181692026-09-22

  The flaw allows a remote authenticated attacker to obtain sensitive information by exploiting improper validation of symbolic links in IBM Financial Transaction Manager (FTM) for RedHat OpenShift, posing a significant security risk.

• CRITICAL 9.8CVE-2026-181632026-09-22

  This flaw allows a remote attacker to execute arbitrary code by improperly deserializing untrusted data, posing a critical risk to system security.

• CRITICAL 9.8CVE-2026-181622026-09-22

  The flaw allows a remote attacker to execute arbitrary code by exploiting improper input handling in the new Function constructor, posing a critical risk.