Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Unclassified CRITICAL 9.1
CVE-2026-19053

The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unau…

No fix yet
Fix from $2,300 2026-08-10
Unclassified CRITICAL 9.8
CVE-2026-16299

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to r…

No fix yet
Fix from $2,300 2026-08-10
Unclassified CRITICAL 9.8
CVE-2026-16298

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset th…

No fix yet
Fix from $2,300 2026-08-10
Unclassified CRITICAL 9.8
CVE-2026-19348

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fna…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.1
CVE-2026-18473

The WP Directory Kit WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-15038

The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remot…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71993

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to …

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71992

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers t…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71991

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration …

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71990

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration tha…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71989

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers …

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71988

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to e…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71987

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to exec…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71986

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to exec…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71985

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attacke…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71984

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers t…

No fix yet
Fix from $2,300 2026-08-09
Unclassified CRITICAL 9.8
CVE-2026-71983

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71958

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71957

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi in…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71956

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi …

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71955

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71954

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71953

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71952

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71951

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71950

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71949

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71948

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71947

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08
Unclassified CRITICAL 9.8
CVE-2026-71946

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /…

No fix yet
Fix from $2,300 2026-08-08