Browse All CVEs
3,400 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-86575 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integra | |
CVE-2026-86576 |
critical | 9.4 | 0.0045 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrat | |
CVE-2026-86577 |
critical | 9.4 | 0.0046 | 2026-10-29 | Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Mana | |
CVE-2026-117532 |
critical | 9.3 | 0.0068 | 2026-10-29 | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in th | |
CVE-2026-112362 |
critical | 9.1 | 0.0037 | 2026-10-29 | @fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versi | |
CVE-2026-115216 |
critical | 9.1 | 0.0024 | 2026-10-29 | In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is dis | |
CVE-2026-65145 |
critical | 10.0 | 0.0053 | 2026-10-29 | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing | |
CVE-2026-117564 |
critical | 9.3 | 0.0060 | 2026-10-29 | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauth | |
CVE-2026-117601 |
critical | 9.3 | 0.0018 | 2026-10-29 | Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mem | |
CVE-2026-117603 |
critical | 9.3 | 0.0019 | 2026-10-29 | Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet C | |
CVE-2026-12665 |
critical | 9.8 | 0.0032 | 2026-10-29 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overf | |
CVE-2026-112780 |
critical | 9.3 | 0.0072 | 2026-10-29 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page | |
CVE-2026-112393 |
critical | 9.2 | 0.0102 | 2026-10-29 | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer over | |
CVE-2026-112398 |
critical | 9.2 | 0.0070 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder c | |
CVE-2026-112403 |
critical | 9.2 | 0.0095 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a ful | |
CVE-2026-112900 |
critical | 9.2 | 0.0130 | 2026-10-29 | Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argum | |
CVE-2026-109444 |
critical | 9.3 | 0.0070 | 2026-10-29 | OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows | |
CVE-2026-77930 |
critical | 9.3 | 0.0069 | 2026-10-29 | EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows atta | |
CVE-2026-113678 |
critical | 9.4 | 0.0063 | 2026-10-29 | Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownW | |
CVE-2026-113682 |
critical | 9.1 | 0.0056 | 2026-10-29 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability | |
CVE-2026-113672 |
critical | 9.9 | 0.0084 | 2026-10-29 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until | |
CVE-2026-112380 |
critical | 9.0 | 0.0041 | 2026-10-29 | Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote acto | |
CVE-2026-113867 |
critical | 9.1 | 0.0018 | 2026-10-29 | Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Becaus | |
CVE-2026-86411 |
critical | 9.1 | 0.0015 | 2026-10-29 | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control conn | |
CVE-2016-20101 |
critical | 9.2 | 0.0040 | 2026-10-29 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability | |
CVE-2026-10131 |
critical | 9.1 | 0.0139 | 2026-10-29 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of | |
CVE-2026-10132 |
critical | 9.1 | 0.0060 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality | |
CVE-2026-10133 |
critical | 9.1 | 0.0060 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R | |
CVE-2026-10135 |
critical | 9.1 | 0.0139 | 2026-10-29 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (versi | |
CVE-2026-10136 |
critical | 9.1 | 0.0060 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of | |
CVE-2026-10137 |
critical | 9.1 | 0.0060 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality o | |
CVE-2026-10138 |
critical | 9.1 | 0.0145 | 2026-10-29 | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000 | |
CVE-2026-10139 |
critical | 9.1 | 0.0062 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (ve | |
CVE-2026-10141 |
critical | 9.1 | 0.0028 | 2026-10-29 | A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000 | |
CVE-2026-112712 |
critical | 9.1 | 0.0031 | 2026-10-29 | @fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 | |
CVE-2026-28763 |
critical | 9.1 | 0.0074 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname fu | |
CVE-2026-33568 |
critical | 9.1 | 0.0104 | 2026-10-29 | A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionali | |
CVE-2026-35499 |
critical | 9.1 | 0.0129 | 2026-10-29 | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality o | |
CVE-2026-40615 |
critical | 9.1 | 0.0074 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName | |
CVE-2026-40627 |
critical | 9.1 | 0.0104 | 2026-10-29 | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality | |
CVE-2026-41222 |
critical | 9.1 | 0.0074 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the boa formParentControl url functi | |
CVE-2026-41223 |
critical | 9.1 | 0.0074 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr func | |
CVE-2026-42019 |
critical | 9.1 | 0.0074 | 2026-10-29 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe | |
CVE-2026-42020 |
critical | 9.1 | 0.0074 | 2026-10-29 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe | |
CVE-2026-42021 |
critical | 9.1 | 0.0048 | 2026-10-29 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static | |
CVE-2026-42022 |
critical | 9.1 | 0.0048 | 2026-10-29 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static | |
CVE-2026-42023 |
critical | 9.1 | 0.0051 | 2026-10-29 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static | |
CVE-2026-42024 |
critical | 9.1 | 0.0051 | 2026-10-29 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static | |
CVE-2026-42025 |
critical | 9.1 | 0.0051 | 2026-10-29 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6 | |
CVE-2026-42026 |
critical | 9.1 | 0.0051 | 2026-10-29 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6 |