Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:94"
637 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42607 |
critical | 9.1 | 0.0438 | 2026-05-11 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with administrative | |
CVE-2026-42555 |
critical | 9.1 | 0.0058 | 2026-05-14 | Valtimo is an open-source business process automation platform. com.ritense.valtimo:document from 12 | |
CVE-2026-41258 |
critical | 9.1 | 0.0032 | 2026-05-15 | OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and | |
CVE-2026-39465 |
critical | 9.1 | 0.0068 | 2026-06-15 | Editor Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 versions. | |
CVE-2026-37637 |
critical | 9.1 | 0.0060 | 2026-06-29 | An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the fi | |
CVE-2026-27436 |
critical | 9.1 | 0.0066 | 2026-07-02 | Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions. | |
CVE-2026-52199 |
critical | 9.1 | 0.0066 | 2026-07-17 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrar | |
CVE-2026-65907 |
critical | 9.1 | 0.0066 | 2026-07-23 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible | |
CVE-2026-66709 |
critical | 9.1 | 0.0082 | 2026-08-06 | Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions. | |
CVE-2026-44758 |
critical | 9.1 | 0.0077 | 2026-08-11 | SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to subm | |
CVE-2026-66145 |
critical | 9.1 | 0.0066 | 2026-08-11 | An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) | |
CVE-2026-115547 |
critical | 9.1 | 0.0054 | 2026-10-23 | An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of sp | |
CVE-2026-42238 |
critical | 9.0 | 0.0097 | 2026-05-04 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes | |
CVE-2026-32999 |
critical | 9.0 | 0.0031 | 2026-05-28 | Insufficient character filtering in backup agent signing module on Comet Backup server allows authen | |
CVE-2026-55570 |
critical | 9.0 | 0.0040 | 2026-06-24 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape th | |
CVE-2026-73485 |
critical | 9.0 | 0.0060 | 2026-08-13 | Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows | |
CVE-2026-73486 |
critical | 9.0 | 0.0066 | 2026-08-13 | Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV p | |
CVE-2026-73487 |
critical | 9.0 | 0.0096 | 2026-08-13 | Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent n | |
CVE-2026-94267 |
critical | 9.0 | 0.0039 | 2026-10-23 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extend | |
CVE-2026-33654 |
high | 8.9 | 0.0051 | 2026-03-27 | nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerabili | |
CVE-2026-60026 |
high | 8.9 | 0.0053 | 2026-07-20 | Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1 - | |
CVE-2026-43945 |
high | 8.9 | 0.0084 | 2026-07-21 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3. | |
CVE-2025-61196 |
high | 8.8 | 0.0056 | 2025-10-30 | An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via t | |
CVE-2026-65660 |
high | 8.8 | 0.0819 | 2026-08-11 | KEV 2 PoC | Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacke |
CVE-2026-70336 |
high | 8.8 | 0.0082 | 2026-08-11 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthoriz | |
CVE-2026-102870 |
high | 8.8 | 0.0091 | 2026-10-13 | Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized att | |
CVE-2026-102863 |
high | 8.8 | 0.0102 | 2026-10-13 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an a | |
CVE-2026-103572 |
high | 8.8 | 0.0099 | 2026-10-13 | Improper control of generation of code ('code injection') in Visual Studio Tools for Applications an | |
CVE-2026-83759 |
high | 8.8 | 0.0092 | 2026-10-13 | Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) al | |
CVE-2023-2017 |
high | 8.8 | 0.0207 | 2023-04-17 | Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), af | |
CVE-2026-2701 |
high | 8.8 | 0.5454 | 2026-04-02 | Authenticated user can upload a malicious file to the server and execute it, which leads to remote c | |
CVE-2026-40316 |
high | 8.8 | 0.0041 | 2026-04-15 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git | |
CVE-2026-41138 |
high | 8.8 | 0.0060 | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-6543 |
high | 8.8 | 0.0047 | 2026-04-30 | IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands w | |
CVE-2026-42994 |
high | 8.8 | 0.0031 | 2026-05-01 | Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embe | |
CVE-2026-2052 |
high | 8.8 | 0.0077 | 2026-05-02 | The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin f | |
CVE-2026-7841 |
high | 8.8 | 0.0059 | 2026-05-06 | A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. A | |
CVE-2026-41139 |
high | 8.8 | 0.0058 | 2026-05-07 | Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before versi | |
CVE-2026-25077 |
high | 8.8 | 0.0073 | 2026-05-08 | Account users are allowed by default to register templates to be downloaded directly to the primary | |
CVE-2026-42603 |
high | 8.8 | 0.0025 | 2026-05-11 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git | |
CVE-2026-41094 |
high | 8.8 | 0.0084 | 2026-05-12 | Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an una | |
CVE-2026-43892 |
high | 8.8 | 0.0026 | 2026-05-12 | AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss() sanitiz | |
CVE-2026-44827 |
high | 8.8 | 0.0072 | 2026-05-14 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allow | |
CVE-2026-8858 |
high | 8.8 | 0.0041 | 2026-06-22 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remo | |
CVE-2026-44959 |
high | 8.8 | 0.0059 | 2026-06-23 | A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 | |
CVE-2026-50741 |
high | 8.8 | 0.0494 | 2026-06-26 | Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio an | |
CVE-2026-13749 |
high | 8.8 | 0.0054 | 2026-06-29 | Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI vers | |
CVE-2026-14383 |
high | 8.8 | 0.0048 | 2026-07-01 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker | |
CVE-2026-14407 |
high | 8.8 | 0.0044 | 2026-07-01 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker | |
CVE-2026-53951 |
high | 8.8 | 0.0026 | 2026-07-08 | Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.15.1, t |