CVE search

372,115 results
CVE-2026-34104CRITICALGuardian Language-System Unauthenticated SQL Injection via name Parameter in designer.phpEPSS 0.4%CVE-2026-34103CRITICALGuardian Language-System Unauthenticated SQL Injection via id Parameter in subtitles.phpEPSS 0.4%CVE-2026-34102CRITICALGuardian Language-System Unauthenticated SQL Injection via id Parameter in job_info_get.phpEPSS 0.4%CVE-2026-34101CRITICALGuardian Language-System Unauthenticated SQL Injection via id Parameter in text_file.phpEPSS 0.4%CVE-2026-34100CRITICALGuardian Language-System Unauthenticated SQL Injection via id Parameter in media.phpEPSS 0.4%CVE-2026-34099CRITICALGuardian Language-System Unauthenticated SQL Injection via id Parameter in job_info.phpEPSS 0.5%CVE-2026-27409MEDIUMWordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-34098MEDIUMGuardian Language-System XSS via id Parameter in media.phpEPSS 0.1%CVE-2026-34097MEDIUMGuardian Language-System XSS via id Parameter in text_file.phpEPSS 0.1%CVE-2026-34096MEDIUMGuardian Language-System XSS via name Parameter in designer.phpEPSS 0.1%CVE-2026-13211MEDIUMGenucenter Disclosure of SNMP CredentialsEPSS 0.1%CVE-2026-58454HIGHJAIOTlink C492A-W6 4.8.30.57701411 RCE via /Anyka/config EndpointEPSS 0.5%CVE-2026-58453CRITICALJAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipcEPSS 1.7%CVE-2026-58452HIGHJAIOTlink C492A-W6 4.8.30.57701411 OS Command Injection via SetMAC EndpointEPSS 2.4%CVE-2026-58025MEDIUMRemote Code Execution via Unsafe Deserialization in LogItem ImportEPSS 0.3%CVE-2026-58029MEDIUMFull Account Takeover from BotPasswords and OAuth via action=changeauthenticationdataEPSS 0.2%CVE-2026-58028NONEPretty-printed API output combined with centralauthtoken allows XSS with certain gadgetsEPSS 0.2%CVE-2026-24270CRITICALNVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability EPSS 0.5%CVE-2026-57517CRITICALControl Web Panel < 0.9.8.1225 Blind SQL Injection via userRes ParameterEPSS 1.2%CVE-2026-24266MEDIUMNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit oEPSS 0.4%