CVE search
400,898 resultsCVE-2026-104454MEDIUMYesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview EndpointEPSS —CVE-2026-104453MEDIUMYesWiki before 4.6.7 CSRF Tag Deletion via admintag ActionEPSS —CVE-2026-104452MEDIUMYesWiki before 4.6.7 CSRF Attachment Deletion via filemanager HandlerEPSS —CVE-2026-104451MEDIUMYesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandlerEPSS —CVE-2026-104450HIGHYesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage ActionEPSS —CVE-2026-104449HIGHYesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_ficheEPSS —CVE-2026-104448HIGHYesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage HandlerEPSS —CVE-2026-104447HIGHYesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateActionEPSS —CVE-2026-104446MEDIUMYesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail HandlerEPSS —CVE-2026-104445HIGHYesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor SpoofingEPSS —CVE-2026-104444HIGHYesWiki before 4.6.7 Authorization Bypass via Comments API editCommentEPSS —CVE-2026-104443HIGHYesWiki before 4.6.7 Scope Bypass via Triples Delete APIEPSS —CVE-2026-104442MEDIUMYesWiki before 4.6.7 Unauthenticated SSRF via syndication ActionEPSS —CVE-2026-86535HIGHApache Thrift: A JSON member name can stall the Node server's event loop indefinitelyEPSS —CVE-2026-104441MEDIUMYesWiki before 4.6.7 Unauthenticated SSRF via valeur ActionEPSS —CVE-2026-104440MEDIUMYesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce ParameterEPSS —CVE-2026-104439HIGHYesWiki before 4.6.7 User Enumeration via Lost-Password FlowEPSS —CVE-2026-104438HIGHYesWiki before 4.6.7 Information Disclosure via listpagestag and includepages ActionsEPSS —CVE-2026-104437HIGHZebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output HandlingEPSS —CVE-2026-104436MEDIUMZebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator LengthEPSS —