Browse All CVEs
14,440 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16911 |
high | 8.8 | 0.0075 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker | |
CVE-2026-63722 |
high | 8.7 | 0.0133 | 2026-10-29 | ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows u | |
CVE-2026-68558 |
high | 8.5 | 0.0039 | 2026-10-29 | Wekan is open source kanban built with Meteor. From 8.36 until 9.74, the outgoing webhook | |
CVE-2026-68560 |
high | 7.7 | 0.0058 | 2026-10-29 | Wekan is open source kanban built with Meteor. Prior to 9.75, models/fileValidation.js int | |
CVE-2026-68561 |
high | 8.8 | 0.0051 | 2026-10-29 | Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow({ up | |
CVE-2026-68899 |
high | 8.7 | 0.0053 | 2026-10-29 | Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid() in models/file | |
CVE-2026-68900 |
high | 7.6 | 0.0035 | 2026-10-29 | Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip() | |
CVE-2026-54491 |
high | 7.1 | 0.0038 | 2026-10-29 | Koel is a free, open-source music streaming solution. Prior to 9.7.1, outbound podcast and | |
CVE-2026-54493 |
high | 7.7 | 0.0042 | 2026-10-29 | Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compati | |
CVE-2026-62727 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-68553 |
high | 7.1 | 0.0048 | 2026-10-29 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an a | |
CVE-2026-75569 |
high | 7.7 | 0.0060 | 2026-10-29 | A flaw was found in mce-operator-bundle. The build process fetches and executes scripts fr | |
CVE-2026-75596 |
high | 8.7 | 0.0037 | 2026-10-29 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fin | |
CVE-2026-76139 |
high | 8.0 | 0.0072 | 2026-10-29 | A flaw was found in acm-operator-bundle. The build process for this component downloads an | |
CVE-2026-76259 |
high | 7.8 | 0.0017 | 2026-10-29 | In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14 | |
CVE-2026-76351 |
high | 8.8 | 0.0042 | 2026-10-29 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure | |
CVE-2026-8619 |
high | 7.1 | 0.0087 | 2026-10-29 | An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2 | |
CVE-2026-18917 |
high | 7.8 | 0.0018 | 2026-10-29 | A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow | |
CVE-2026-11861 |
high | 8.1 | 0.0036 | 2026-10-29 | A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and A | |
CVE-2026-13097 |
high | 8.7 | 0.0077 | 2026-10-29 | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Ke | |
CVE-2026-73197 |
high | 7.5 | 0.0059 | 2026-10-29 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerabi | |
CVE-2026-73198 |
high | 7.5 | 0.0054 | 2026-10-29 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerabilit | |
CVE-2026-66581 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions. | |
CVE-2026-66590 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions. | |
CVE-2026-77079 |
high | 7.4 | 0.0045 | 2026-10-29 | n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role d | |
CVE-2026-77118 |
high | 8.4 | 0.0017 | 2026-10-29 | A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In Deco | |
CVE-2026-64960 |
high | 8.7 | 0.0063 | 2026-10-29 | ATutor Gameme module allows users to upload files of any type and extension without restri | |
CVE-2026-64966 |
high | 8.7 | 0.0072 | 2026-10-29 | ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An | |
CVE-2026-16922 |
high | 7.0 | 0.0010 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbi | |
CVE-2026-16923 |
high | 7.8 | 0.0012 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevate | |
CVE-2026-16924 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16925 |
high | 7.8 | 0.0013 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve priv | |
CVE-2026-16927 |
high | 7.0 | 0.0010 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root pr | |
CVE-2026-16928 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-16932 |
high | 8.8 | 0.0019 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbi | |
CVE-2026-49825 |
high | 8.2 | 0.0030 | 2026-10-29 | lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link | |
CVE-2026-19611 |
high | 7.4 | 0.0089 | 2026-10-29 | A flaw was found in WildFly Elytron. Password hashing and verification normalize input wit | |
CVE-2026-15686 |
high | 7.2 | 0.0109 | 2026-10-29 | Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnera | |
CVE-2026-18264 |
high | 8.8 | 0.0227 | 2026-10-29 | NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vulnerabilit | |
CVE-2026-18279 |
high | 8.8 | 0.0069 | 2026-10-29 | Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulne | |
CVE-2026-18285 |
high | 7.8 | 0.0055 | 2026-10-29 | Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulne | |
CVE-2026-18286 |
high | 7.8 | 0.0034 | 2026-10-29 | Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulner | |
CVE-2026-18287 |
high | 7.8 | 0.0034 | 2026-10-29 | Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerab | |
CVE-2026-18295 |
high | 7.8 | 0.0021 | 2026-10-29 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This v | |
CVE-2026-18296 |
high | 7.8 | 0.0023 | 2026-10-29 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. | |
CVE-2026-18297 |
high | 7.8 | 0.0024 | 2026-10-29 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | |
CVE-2026-18298 |
high | 7.8 | 0.0022 | 2026-10-29 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. | |
CVE-2026-18299 |
high | 7.8 | 0.0021 | 2026-10-29 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerabili | |
CVE-2026-18300 |
high | 7.8 | 0.0033 | 2026-10-29 | GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerabi | |
CVE-2026-18301 |
high | 7.8 | 0.0034 | 2026-10-29 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerabi |