CVE search

400,891 results
CVE-2026-104469HIGHYesWiki before 4.6.7 Session Fixation via Login in AuthController.phpEPSS —CVE-2026-104468MEDIUMYesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordActionEPSS —CVE-2026-104467CRITICALYesWiki before 4.6.7 Authorization Bypass via Public API ModeEPSS —CVE-2026-104466MEDIUMYesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src AttributeEPSS —CVE-2026-104465MEDIUMYesWiki before 4.6.7 Reflected XSS via field Parameter in mail HandlerEPSS —CVE-2026-104464HIGHYesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameterEPSS —CVE-2026-104463HIGHYesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub InboxEPSS —CVE-2026-104462HIGHYesWiki before 4.6.7 SQL Injection via nuagetag tags parameterEPSS —CVE-2026-104461MEDIUMYesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileFieldEPSS —CVE-2026-104460HIGHYesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearchEPSS —CVE-2026-104459MEDIUMYesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handleEPSS —CVE-2026-104458HIGHYesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition AddressesEPSS —CVE-2026-104457HIGHYesWiki before 4.6.7 SQL Injection via filtertags filterN parameterEPSS —CVE-2026-104456HIGHYesWiki before 4.6.7 Second-Order SQL Injection via ACL UsernameEPSS —CVE-2026-104455MEDIUMYesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS ActionEPSS —CVE-2026-104454MEDIUMYesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview EndpointEPSS —CVE-2026-104453MEDIUMYesWiki before 4.6.7 CSRF Tag Deletion via admintag ActionEPSS —CVE-2026-104452MEDIUMYesWiki before 4.6.7 CSRF Attachment Deletion via filemanager HandlerEPSS —CVE-2026-104451MEDIUMYesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandlerEPSS —CVE-2026-104450HIGHYesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage ActionEPSS —