SEARCH
CVEs, Fix available
51–75 of 114,345 matches, best first.
- CVE-2018-7602Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
- CVE-2016-3081Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attacker
- CVE-2025-6554Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML pa
- CVE-2025-11953Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
- CVE-2026-42897Microsoft Exchange Server Spoofing Vulnerability
- CVE-2026-33017Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
- CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
- CVE-2026-105134Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
- CVE-2026-123218IBM Aspera Faspex Authorization Bypass
- CVE-2026-116779FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
- CVE-2024-4947Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf
- CVE-2025-34291Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
- CVE-2026-5430Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place
- CVE-2026-22719VMware Aria Operations command injection vulnerability
- CVE-2026-65400An authentication issue was addressed with improved state management.
- CVE-2026-116606Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
- CVE-2024-4577Argument Injection in PHP-CGI
- CVE-2024-7971Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page.
- CVE-2024-7965Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption
- CVE-2026-58644Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2026-50522Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2025-68613n8n Vulnerable to Remote Code Execution via Expression Injection
- CVE-2026-48172LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.
- CVE-2023-6345Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to pote