Browse All CVEs
14,466 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-19056 |
high | 7.1 | 0.0025 | 2026-10-29 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a pa | |
CVE-2026-58083 |
high | 8.4 | 0.0017 | 2026-10-29 | While the kernel was copying knotes during fork, a knote with a timer-based filter could f | |
CVE-2026-58085 |
high | 7.5 | 0.0032 | 2026-10-29 | After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver fa | |
CVE-2026-58086 |
high | 8.1 | 0.0038 | 2026-10-29 | As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied t | |
CVE-2026-58087 |
high | 7.8 | 0.0016 | 2026-10-29 | The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the targe | |
CVE-2026-58088 |
high | 7.4 | 0.0010 | 2026-10-29 | The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer f | |
CVE-2026-75589 |
high | 7.5 | 0.0051 | 2026-10-29 | Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signat | |
CVE-2026-76164 |
high | 7.1 | 0.0040 | 2026-10-29 | AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler s | |
CVE-2026-67363 |
high | 7.7 | 0.0056 | 2026-10-29 | Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4. | |
CVE-2026-51367 |
high | 7.5 | 0.0060 | 2026-10-29 | An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain s | |
CVE-2026-54796 |
high | 7.2 | 0.0200 | 2026-10-29 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization o | |
CVE-2026-76221 |
high | 8.7 | 0.0049 | 2026-10-29 | GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name | |
CVE-2026-76234 |
high | 8.7 | 0.0031 | 2026-10-29 | libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain crypt | |
CVE-2026-14970 |
high | 7.5 | 0.0046 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client | |
CVE-2026-15061 |
high | 8.2 | 0.0059 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow | |
CVE-2026-15078 |
high | 8.1 | 0.0032 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain un | |
CVE-2026-16686 |
high | 8.2 | 0.0050 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS- | |
CVE-2026-16690 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16703 |
high | 7.8 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevate | |
CVE-2026-16706 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16814 |
high | 8.8 | 0.0041 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-16817 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16818 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-18526 |
high | 7.4 | 0.0046 | 2026-10-29 | HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scripting (XSS) | |
CVE-2026-18756 |
high | 7.2 | 0.0047 | 2026-10-29 | HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-44829 |
high | 8.8 | 0.0050 | 2026-10-29 | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename | |
CVE-2026-45741 |
high | 7.5 | 0.0037 | 2026-10-29 | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPu | |
CVE-2026-45742 |
high | 7.5 | 0.0070 | 2026-10-29 | Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the n | |
CVE-2026-49253 |
high | 7.1 | 0.0044 | 2026-10-29 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. | |
CVE-2026-49255 |
high | 8.8 | 0.0079 | 2026-10-29 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. | |
CVE-2026-52834 |
high | 7.3 | 0.0017 | 2026-10-29 | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, dec | |
CVE-2026-16819 |
high | 7.7 | 0.0012 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a deni | |
CVE-2026-18430 |
high | 7.2 | 0.0047 | 2026-10-29 | HumHub 1.18.4 contains a stored cross-site scripting vulnerability in the comment-deletion | |
CVE-2026-44252 |
high | 7.7 | 0.0054 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-46343 |
high | 7.5 | 0.0042 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-62669 |
high | 7.4 | 0.0050 | 2026-10-29 | Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.1 | |
CVE-2026-41424 |
high | 8.2 | 0.0047 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-44901 |
high | 8.4 | 0.0075 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-45798 |
high | 7.5 | 0.0092 | 2026-10-29 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-75141 |
high | 8.5 | 0.0020 | 2026-10-29 | FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When | |
CVE-2026-75142 |
high | 8.5 | 0.0020 | 2026-10-29 | FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavf | |
CVE-2026-75144 |
high | 8.5 | 0.0020 | 2026-10-29 | FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dir | |
CVE-2026-75146 |
high | 7.2 | 0.0026 | 2026-10-29 | FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavform | |
CVE-2026-17183 |
high | 7.1 | 0.0029 | 2026-10-29 | An authenticated user with permission to create or edit alert rules can bypass datasource | |
CVE-2026-55191 |
high | 8.7 | 0.0062 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP | |
CVE-2026-55192 |
high | 7.2 | 0.0045 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP | |
CVE-2026-55193 |
high | 8.7 | 0.0048 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP | |
CVE-2026-55194 |
high | 8.7 | 0.0062 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_clie | |
CVE-2026-55564 |
high | 7.1 | 0.0033 | 2026-10-29 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyp | |
CVE-2026-61518 |
high | 8.7 | 0.0046 | 2026-10-29 | ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The pri |