SEARCH
CVEs, Fix available
1–25 of 114,343 matches, best first.
- CVE-2026-63030WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
- CVE-2026-97229Integer Overflow or Wraparound in GitLab
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618RCE via OOM corruption
- CVE-2025-55182A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0…
- CVE-2026-60004Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
- CVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
- CVE-2026-87902An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the
- CVE-2026-111497Out-of-Bounds Write in Google Brotli Decoder
- CVE-2025-32432Craft CMS Allows Remote Code Execution
- CVE-2025-3248Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing
- CVE-2026-72898Metabase SQL injection via password reset endpoint
- CVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
- CVE-2026-110447Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in…
- CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability
- CVE-2024-23897Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character…
- CVE-2026-41940WebPros cPanel and WHM Authentication Bypass via Login Flow
- CVE-2026-123158sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass…
- CVE-2025-32433Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
- CVE-2025-31161CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy…
- CVE-2025-5777NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
- CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
- CVE-2024-1086Use-after-free in Linux kernel's netfilter: nf_tables component
- CVE-2024-23692Rejetto HTTP File Server 2.3m Unauthenticated RCE