Browse All CVEs
1,808 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-93588 |
low | 2.3 | 0.0027 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in th | |
CVE-2026-93586 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability i | |
CVE-2026-86424 |
low | 2.0 | 0.0014 | 2026-10-29 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vu | |
CVE-2026-86422 |
low | 1.0 | 0.0013 | 2026-10-29 | ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path pol | |
CVE-2026-61872 |
low | 2.0 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when | |
CVE-2026-61869 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that | |
CVE-2026-61870 |
low | 2.1 | 0.0019 | 2026-10-29 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when | |
CVE-2026-61865 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operat | |
CVE-2026-61863 |
low | 2.1 | 0.0019 | 2026-10-29 | ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF | |
CVE-2026-61864 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation t | |
CVE-2026-61862 |
low | 2.1 | 0.0010 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability | |
CVE-2026-61464 |
low | 1.0 | 0.0009 | 2026-10-29 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerab | |
CVE-2026-56362 |
low | 2.1 | 0.0019 | 2026-10-29 | ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixel | |
CVE-2026-105081 |
low | 2.0 | 0.0011 | 2026-10-29 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symboli | |
CVE-2025-71396 |
low | 2.3 | 0.0055 | 2026-10-29 | SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 does not enforce a defa | |
CVE-2025-71394 |
low | 2.3 | 0.0037 | 2026-10-29 | SurrealDB versions before 2.2.2 contain a local file read vulnerability in the DEFINE ANAL | |
CVE-2024-22047 |
low | 3.1 | 0.0050 | 2026-10-29 | A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated | |
CVE-2026-118774 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118775 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118776 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118780 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-118781 |
low | 2.9 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in J | |
CVE-2026-84392 |
low | 2.7 | 0.0107 | 2026-10-29 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 a | |
CVE-2026-106175 |
low | 2.3 | 0.0010 | 2026-10-29 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6. | |
CVE-2026-119125 |
low | 2.3 | — | 2026-10-29 | Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a | |
CVE-2026-119126 |
low | 2.3 | — | 2026-10-29 | Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys w | |
CVE-2026-119130 |
low | 2.1 | — | 2026-10-29 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify th | |
CVE-2026-119133 |
low | 2.1 | — | 2026-10-29 | Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw | |
CVE-2026-112255 |
low | 2.9 | — | 2026-10-29 | Initialization of a resource with an insecure default vulnerability in OpenText Advanced A | |
CVE-2026-115794 |
low | 2.3 | — | 2026-10-29 | P-Net before 1.0.3 passes the application alarm callback a data length derived from the va | |
CVE-2026-86874 |
low | 3.3 | 0.0013 | 2026-10-29 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in | |
CVE-2026-93571 |
low | 2.3 | — | 2026-10-29 | Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attac | |
CVE-2026-104312 |
low | 3.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a s | |
CVE-2026-77564 |
low | 3.3 | 0.0013 | 2026-10-29 | Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and | |
CVE-2026-119048 |
low | 2.3 | — | 2026-10-29 | JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability i | |
CVE-2026-88648 |
low | 3.7 | 0.0020 | 2026-10-29 | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordina | |
CVE-2026-85498 |
low | 3.5 | 0.0026 | 2026-10-29 | A flaw was found in polkit. When processing input that begins with a null byte, an arithme | |
CVE-2026-115303 |
low | 3.7 | 0.0022 | 2026-10-29 | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characte | |
CVE-2024-3586 |
low | 3.5 | 0.0016 | 2026-10-29 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its se | |
CVE-2026-105258 |
low | 3.5 | 0.0017 | 2026-10-29 | The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several book | |
CVE-2026-108685 |
low | 3.7 | 0.0020 | 2026-10-29 | The WP Post Author WordPress plugin before 4.2.0 does not check that the account was crea | |
CVE-2026-108686 |
low | 3.7 | 0.0016 | 2026-10-29 | The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settin | |
CVE-2026-85007 |
low | 3.8 | 0.0013 | 2026-10-29 | The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability | |
CVE-2026-86933 |
low | 3.3 | 0.0013 | 2026-10-29 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixe | |
CVE-2026-101415 |
low | 3.1 | 0.0027 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101570 |
low | 3.7 | 0.0031 | 2026-10-29 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webse | |
CVE-2026-50419 |
low | 3.3 | 0.0046 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an aut | |
CVE-2026-50416 |
low | 3.3 | 0.0046 | 2026-10-29 | 2 PoC | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an aut |
CVE-2026-90727 |
low | 3.8 | 0.0026 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-109823 |
low | 2.3 | 0.0037 | 2026-10-29 | An attacker can read the name of filesystem paths of your application present via Tidewave |