Browse All CVEs
14,827 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-117568 |
high | 7.3 | 0.0060 | 2026-10-29 | mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attack | |
CVE-2026-117569 |
high | 8.5 | 0.0067 | 2026-10-29 | Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_ | |
CVE-2026-117573 |
high | 8.5 | 0.0070 | 2026-10-29 | hagent through commit 761eec6 contains an OS command injection vulnerability that allows M | |
CVE-2026-117602 |
high | 8.6 | 0.0011 | 2026-10-29 | Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader | |
CVE-2026-117860 |
high | 8.1 | 0.0019 | 2026-10-29 | Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed i | |
CVE-2026-117864 |
high | 8.8 | 0.0018 | 2026-10-29 | Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, | |
CVE-2026-117866 |
high | 7.3 | 0.0019 | 2026-10-29 | Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulne | |
CVE-2026-117867 |
high | 7.3 | 0.0019 | 2026-10-29 | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firef | |
CVE-2026-117869 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117870 |
high | 7.3 | 0.0019 | 2026-10-29 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox | |
CVE-2026-117871 |
high | 7.3 | 0.0018 | 2026-10-29 | Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Fi | |
CVE-2026-117872 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed | |
CVE-2026-117873 |
high | 8.1 | 0.0019 | 2026-10-29 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability w | |
CVE-2026-117879 |
high | 7.3 | 0.0019 | 2026-10-29 | Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixe | |
CVE-2026-117881 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117883 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox | |
CVE-2026-117884 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, F | |
CVE-2026-117886 |
high | 8.1 | 0.0019 | 2026-10-29 | Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixe | |
CVE-2026-117887 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117889 |
high | 7.3 | 0.0019 | 2026-10-29 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was f | |
CVE-2026-117890 |
high | 7.3 | 0.0018 | 2026-10-29 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i | |
CVE-2026-117891 |
high | 7.3 | 0.0019 | 2026-10-29 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Fi | |
CVE-2026-117892 |
high | 7.3 | 0.0019 | 2026-10-29 | Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulne | |
CVE-2026-117897 |
high | 7.3 | 0.0019 | 2026-10-29 | Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixe | |
CVE-2026-117899 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox | |
CVE-2026-117900 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, | |
CVE-2026-117901 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117904 |
high | 8.8 | 0.0018 | 2026-10-29 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-117910 |
high | 7.3 | 0.0018 | 2026-10-29 | Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefo | |
CVE-2026-117912 |
high | 8.1 | 0.0020 | 2026-10-29 | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability | |
CVE-2026-117915 |
high | 7.3 | 0.0019 | 2026-10-29 | Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerabilit | |
CVE-2026-117918 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefo | |
CVE-2026-117919 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117921 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed | |
CVE-2026-117922 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Fi | |
CVE-2026-117925 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117926 |
high | 8.1 | 0.0019 | 2026-10-29 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefo | |
CVE-2026-117928 |
high | 8.1 | 0.0019 | 2026-10-29 | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability | |
CVE-2026-117929 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117936 |
high | 8.8 | 0.0019 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-117937 |
high | 7.3 | 0.0019 | 2026-10-29 | Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefo | |
CVE-2026-117940 |
high | 8.8 | 0.0018 | 2026-10-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2025-52290 |
high | 7.5 | 0.0058 | 2026-10-29 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg ve | |
CVE-2026-107084 |
high | 8.8 | 0.0020 | 2026-10-29 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forger | |
CVE-2026-112770 |
high | 8.7 | 0.0071 | 2026-10-29 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnera | |
CVE-2026-112775 |
high | 8.7 | 0.0040 | 2026-10-29 | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that al | |
CVE-2026-112390 |
high | 8.2 | 0.0059 | 2026-10-29 | Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite | |
CVE-2026-112392 |
high | 8.2 | 0.0059 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can deref | |
CVE-2026-112396 |
high | 7.5 | 0.0069 | 2026-10-29 | Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after- | |
CVE-2026-112397 |
high | 8.7 | 0.0057 | 2026-10-29 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() c |