Browse All CVEs
10,602 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54080 |
medium | 6.9 | 0.0052 | 2026-10-29 | veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parse | |
CVE-2026-54081 |
medium | 6.9 | 0.0052 | 2026-10-29 | veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parse | |
CVE-2026-54082 |
medium | 6.5 | 0.0040 | 2026-10-29 | veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.7 | |
CVE-2026-67193 |
medium | 6.9 | 0.0041 | 2026-10-29 | Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allow | |
CVE-2026-18257 |
medium | 5.6 | 0.0015 | 2026-10-29 | Improper validity period check for root issuer certificate in CycloneCrypto cryptographic | |
CVE-2026-20316 |
medium | 5.3 | 0.3510 | 2026-10-29 | KEV | Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Cente |
CVE-2026-13723 |
medium | 6.5 | 0.0048 | 2026-10-29 | A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an | |
CVE-2026-54705 |
medium | 6.3 | 0.0030 | 2026-10-29 | MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fa | |
CVE-2026-13346 |
medium | 5.6 | 0.0029 | 2026-10-29 | pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files t | |
CVE-2026-18266 |
medium | 5.4 | 0.0029 | 2026-10-29 | Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability. This vulnerability allows | |
CVE-2026-63118 |
medium | 6.9 | 0.0024 | 2026-10-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prio | |
CVE-2026-63119 |
medium | 6.2 | 0.0019 | 2026-10-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prio | |
CVE-2026-67430 |
medium | 5.3 | 0.0037 | 2026-10-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prio | |
CVE-2026-67433 |
medium | 5.8 | 0.0010 | 2026-10-29 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and | |
CVE-2026-67435 |
medium | 6.0 | 0.0050 | 2026-10-29 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and | |
CVE-2026-13305 |
medium | 6.4 | 0.0017 | 2026-10-29 | Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Sig | |
CVE-2026-13306 |
medium | 4.3 | 0.0027 | 2026-10-29 | Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerabilit | |
CVE-2026-13307 |
medium | 6.8 | 0.0034 | 2026-10-29 | Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vu | |
CVE-2026-13309 |
medium | 6.8 | 0.0034 | 2026-10-29 | Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution V | |
CVE-2026-17659 |
medium | 4.2 | 0.0021 | 2026-10-29 | Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-17662 |
medium | 4.3 | 0.0021 | 2026-10-29 | Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowe | |
CVE-2026-17664 |
medium | 6.5 | 0.0039 | 2026-10-29 | Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922. | |
CVE-2026-17667 |
medium | 6.5 | 0.0052 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17668 |
medium | 6.5 | 0.0052 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17674 |
medium | 6.5 | 0.0030 | 2026-10-29 | Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a rem | |
CVE-2026-17679 |
medium | 6.5 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151. | |
CVE-2026-17683 |
medium | 6.5 | 0.0047 | 2026-10-29 | Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a re | |
CVE-2026-17689 |
medium | 4.3 | 0.0045 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17690 |
medium | 6.5 | 0.0025 | 2026-10-29 | Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151 | |
CVE-2026-17693 |
medium | 4.3 | 0.0021 | 2026-10-29 | Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-17696 |
medium | 4.3 | 0.0026 | 2026-10-29 | Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17700 |
medium | 4.3 | 0.0026 | 2026-10-29 | Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.7 | |
CVE-2026-17703 |
medium | 6.5 | 0.0030 | 2026-10-29 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7 | |
CVE-2026-17706 |
medium | 4.3 | 0.0026 | 2026-10-29 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 1 | |
CVE-2026-17707 |
medium | 6.5 | 0.0035 | 2026-10-29 | Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a re | |
CVE-2026-17714 |
medium | 6.5 | 0.0052 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17724 |
medium | 4.2 | 0.0017 | 2026-10-29 | Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-17728 |
medium | 5.4 | 0.0022 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17730 |
medium | 4.3 | 0.0026 | 2026-10-29 | Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17731 |
medium | 4.3 | 0.0021 | 2026-10-29 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.7 | |
CVE-2026-17733 |
medium | 4.3 | 0.0021 | 2026-10-29 | Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 al | |
CVE-2026-17734 |
medium | 5.4 | 0.0022 | 2026-10-29 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a | |
CVE-2026-17736 |
medium | 5.8 | 0.0020 | 2026-10-29 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to | |
CVE-2026-17737 |
medium | 5.0 | 0.0019 | 2026-10-29 | Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a r | |
CVE-2026-17739 |
medium | 4.2 | 0.0015 | 2026-10-29 | Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-17740 |
medium | 4.3 | 0.0039 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17742 |
medium | 4.3 | 0.0021 | 2026-10-29 | Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowe | |
CVE-2026-17743 |
medium | 6.5 | 0.0024 | 2026-10-29 | Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 | |
CVE-2026-17745 |
medium | 5.8 | 0.0027 | 2026-10-29 | Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17746 |
medium | 5.8 | 0.0019 | 2026-10-29 | Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote atta |