Browse All CVEs
30,015 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-92744 |
high | 8.7 | — | 2026-10-29 | Under certain conditions, privilege manager agent allows a remote unauthenticated attacker | |
CVE-2026-107238 |
high | 8.7 | — | 2026-10-29 | A vulnerability allowing an authenticated domain user to perform remote code execution (RC | |
CVE-2026-107239 |
high | 8.8 | — | 2026-10-29 | A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to pe | |
CVE-2023-22793 |
critical | 9.3 | — | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE | |
CVE-2026-107444 |
medium | 4.3 | 0.0020 | 2026-10-29 | A flaw was found in Katello where the Docker Tags repositories API does not properly enfor | |
CVE-2026-112211 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2025-13327 |
medium | 6.3 | 0.0017 | 2026-10-29 | A flaw was found in uv. This vulnerability allows an attacker to execute malicious code du | |
CVE-2026-58013 |
high | 8.2 | 0.0050 | 2026-10-29 | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() | |
CVE-2026-58011 |
high | 7.5 | 0.0047 | 2026-10-29 | A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_ti | |
CVE-2026-58012 |
high | 8.2 | 0.0049 | 2026-10-29 | A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function whe | |
CVE-2026-58010 |
high | 8.2 | 0.0049 | 2026-10-29 | A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal functio | |
CVE-2026-16118 |
high | 7.1 | 0.0022 | 2026-10-29 | A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_ma | |
CVE-2026-15588 |
medium | 5.3 | 0.0048 | 2026-10-29 | A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` compon | |
CVE-2026-68562 |
medium | 6.2 | 0.0038 | 2026-10-29 | A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write acc | |
CVE-2026-89058 |
high | 7.4 | 0.0026 | 2026-10-29 | A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("* | |
CVE-2026-119285 |
medium | 5.9 | — | 2026-10-29 | Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CO | |
CVE-2026-119286 |
high | 7.5 | — | 2026-10-29 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 unt | |
CVE-2026-119284 |
medium | 6.9 | — | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing | |
CVE-2026-115943 |
— | — | — | 2026-10-29 | Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of nu | |
CVE-2026-107176 |
medium | 6.8 | 0.0016 | 2026-10-29 | A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader | |
CVE-2026-119317 |
medium | 6.0 | — | 2026-10-29 | On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could rea | |
CVE-2026-45049 |
high | 8.3 | — | 2026-10-29 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cr | |
CVE-2026-119282 |
high | 7.3 | — | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 | |
CVE-2026-119283 |
high | 7.5 | — | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing | |
CVE-2026-61671 |
high | 8.1 | — | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched | |
CVE-2026-61673 |
medium | 6.3 | — | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-sit | |
CVE-2026-61645 |
critical | 9.1 | — | 2026-10-29 | Docat is a tool for hosting versioned static documentation. In the affected implementation | |
CVE-2026-61654 |
high | 8.3 | — | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0 | |
CVE-2026-61707 |
critical | 9.0 | — | 2026-10-29 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-61719 |
high | 8.9 | — | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site sc | |
CVE-2026-119281 |
medium | 5.9 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-13303 |
high | 8.7 | — | 2026-10-29 | HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery | |
CVE-2026-61576 |
high | 8.3 | — | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0 | |
CVE-2026-119203 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter | |
CVE-2026-119207 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119325 |
high | 7.5 | — | 2026-10-29 | Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access contro | |
CVE-2026-119205 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter | |
CVE-2026-119206 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take e | |
CVE-2026-119204 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consum | |
CVE-2026-119209 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119208 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consum | |
CVE-2026-119277 |
medium | 5.9 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119278 |
medium | 5.9 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119210 |
medium | 5.9 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119276 |
medium | 5.9 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119280 |
low | 3.7 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-119279 |
medium | 5.9 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL | |
CVE-2026-110073 |
medium | 5.4 | 0.0036 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-110074 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-119198 |
medium | 5.9 | — | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a cli |