All CVEs — page 6 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• HIGH 8.2CVE-2026-74222public exploit available2026-09-29
• HIGH 8.2CVE-2026-74221public exploit available2026-09-29
• HIGH 8.2CVE-2026-74220public exploit available2026-09-29
• CRITICAL 9CVE-2026-72510public exploit available2026-09-29
• CRITICAL 9CVE-2026-72507public exploit available2026-09-29

  The flaw is a time-based blind SQL injection vulnerability in the 'reportType' parameter, allowing attackers to inject malicious SQL queries and potentially gain unauthorized access or manipulate data. This matters because it can lead to severe data breaches and system compromise.

• MEDIUM 4.8CVE-2026-71974public exploit available2026-09-29
• MEDIUM 5.2CVE-2026-71973public exploit available2026-09-29
• MEDIUM 5.9CVE-2026-71972public exploit available2026-09-29
• HIGH 8.2CVE-2026-71971public exploit available2026-09-29
• CRITICAL 10CVE-2026-71379public exploit available2026-09-29

  This vulnerability allows unauthenticated attackers to export arbitrary database tables, posing a significant risk to data integrity and confidentiality.

• HIGH 7.1CVE-2026-71302public exploit available2026-09-29
• LOW 3.5CVE-2026-71189public exploit available2026-09-29
• CRITICAL 9.1CVE-2026-70356public exploit available2026-09-29

  The flaw allows an attacker to upload and execute arbitrary PHP files, leading to remote code execution.

• LOW 3.7CVE-2026-69662public exploit available2026-09-29
• CRITICAL 9CVE-2026-68954public exploit available2026-09-29

  The vulnerability allows an attacker to inject time-based SQL queries, potentially leading to data theft or system compromise.

• CRITICAL 9CVE-2026-68068public exploit available2026-09-29

  This vulnerability allows an attacker to inject time-based SQL queries, potentially leading to data theft or system compromise.

• CRITICAL 9CVE-2026-63713public exploit available2026-09-29

  This vulnerability allows an attacker to inject time-based SQL queries, potentially leading to data exfiltration or system compromise.

• MEDIUM 4.7CVE-2026-102771public exploit available2026-09-29
• LOW 3.3CVE-2026-102621public exploit available2026-09-29
• CRITICAL 10CVE-2026-96587public exploit available2026-09-29

  The Viidure Android application hardcodes plaintext cloud storage credentials, allowing unauthorized access to critical storage.

• UNSCOREDCVE-2026-94952public exploit available2026-09-29
• HIGH 7.5CVE-2026-94204public exploit available2026-09-29
• UNSCOREDCVE-2026-938532026-09-29
• MEDIUM 4.3CVE-2026-818422026-09-29
• MEDIUM 5.3CVE-2026-818412026-09-29