Browse All CVEs
3,474 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18450 |
critical | 9.8 | 0.0040 | 2026-10-29 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands | |
CVE-2026-92885 |
critical | 9.8 | 0.0037 | 2026-10-29 | The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to | |
CVE-2026-102788 |
critical | 9.3 | 0.0039 | 2026-10-29 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On | |
CVE-2026-102789 |
critical | 9.3 | 0.0032 | 2026-10-29 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in | |
CVE-2026-76932 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76933 |
critical | 9.4 | 0.0045 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This i | |
CVE-2026-76934 |
critical | 9.8 | 0.0052 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76935 |
critical | 9.4 | 0.0033 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76936 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76937 |
critical | 9.4 | 0.0045 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This | |
CVE-2026-76938 |
critical | 9.8 | 0.0064 | 2026-10-29 | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue | |
CVE-2026-76939 |
critical | 9.8 | 0.0052 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This i | |
CVE-2026-82116 |
critical | 9.8 | 0.0061 | 2026-10-29 | Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects | |
CVE-2026-82117 |
critical | 9.8 | 0.0064 | 2026-10-29 | Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server | |
CVE-2026-82118 |
critical | 9.8 | 0.0052 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Vers | |
CVE-2026-82119 |
critical | 9.8 | 0.0105 | 2026-10-29 | OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: | |
CVE-2026-82120 |
critical | 9.8 | 0.0036 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Versi | |
CVE-2026-82122 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Vers | |
CVE-2026-86574 |
critical | 9.8 | 0.0052 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 1 | |
CVE-2026-86575 |
critical | 9.4 | 0.0045 | 2026-10-29 | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integra | |
CVE-2026-86576 |
critical | 9.4 | 0.0045 | 2026-10-29 | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrat | |
CVE-2026-86577 |
critical | 9.4 | 0.0046 | 2026-10-29 | Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Mana | |
CVE-2026-117532 |
critical | 9.3 | 0.0068 | 2026-10-29 | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in th | |
CVE-2026-112362 |
critical | 9.1 | 0.0037 | 2026-10-29 | @fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versi | |
CVE-2026-115216 |
critical | 9.1 | 0.0024 | 2026-10-29 | In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is dis | |
CVE-2026-65145 |
critical | 10.0 | 0.0053 | 2026-10-29 | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing | |
CVE-2026-117564 |
critical | 9.3 | 0.0060 | 2026-10-29 | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauth | |
CVE-2026-117601 |
critical | 9.3 | 0.0018 | 2026-10-29 | Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mem | |
CVE-2026-117603 |
critical | 9.3 | 0.0019 | 2026-10-29 | Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet C | |
CVE-2026-12665 |
critical | 9.8 | 0.0032 | 2026-10-29 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overf | |
CVE-2026-112780 |
critical | 9.3 | 0.0072 | 2026-10-29 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page | |
CVE-2026-112393 |
critical | 9.2 | 0.0102 | 2026-10-29 | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer over | |
CVE-2026-112398 |
critical | 9.2 | 0.0070 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder c | |
CVE-2026-112403 |
critical | 9.2 | 0.0095 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a ful | |
CVE-2026-112900 |
critical | 9.2 | 0.0130 | 2026-10-29 | Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argum | |
CVE-2026-109444 |
critical | 9.3 | 0.0070 | 2026-10-29 | OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows | |
CVE-2026-77930 |
critical | 9.3 | 0.0069 | 2026-10-29 | EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows atta | |
CVE-2026-113678 |
critical | 9.4 | 0.0063 | 2026-10-29 | Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownW | |
CVE-2026-113682 |
critical | 9.1 | 0.0056 | 2026-10-29 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability | |
CVE-2026-113672 |
critical | 9.9 | 0.0084 | 2026-10-29 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until | |
CVE-2026-112380 |
critical | 9.0 | 0.0041 | 2026-10-29 | Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote acto | |
CVE-2026-113867 |
critical | 9.1 | 0.0018 | 2026-10-29 | Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Becaus | |
CVE-2026-86411 |
critical | 9.1 | 0.0015 | 2026-10-29 | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control conn | |
CVE-2026-86413 |
critical | 9.1 | 0.0032 | 2026-10-29 | When using an *ambient user* in a first transfer doing Negotiate authentication and asked | |
CVE-2016-20101 |
critical | 9.2 | 0.0040 | 2026-10-29 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability | |
CVE-2026-10131 |
critical | 9.1 | 0.0139 | 2026-10-29 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of | |
CVE-2026-10132 |
critical | 9.1 | 0.0060 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality | |
CVE-2026-10133 |
critical | 9.1 | 0.0060 | 2026-10-29 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R | |
CVE-2026-10135 |
critical | 9.1 | 0.0139 | 2026-10-29 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (versi | |
CVE-2026-10136 |
critical | 9.1 | 0.0060 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of |