Browse All CVEs
10,519 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-47078 |
medium | 4.8 | 0.0015 | 2026-10-29 | Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing fil | |
CVE-2026-55737 |
medium | 5.1 | 0.0029 | 2026-10-29 | Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP er | |
CVE-2026-17192 |
medium | 6.3 | 0.0029 | 2026-10-29 | A VCO feature does not sufficiently validate caller-supplied input, allowing requests to b | |
CVE-2026-66390 |
medium | 6.1 | 0.0057 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-66391 |
medium | 6.5 | 0.0064 | 2026-10-29 | Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache | |
CVE-2026-17569 |
medium | 4.3 | 0.0027 | 2026-10-29 | Improper access control in the NetBox synchronizer in Devolutions Server allows an authent | |
CVE-2026-17570 |
medium | 4.3 | 0.0025 | 2026-10-29 | Improper access control in the PAM password history endpoints in Devolutions Server allows | |
CVE-2026-48052 |
medium | 5.4 | 0.0037 | 2026-10-29 | Papra is a minimalistic document management and archiving platform. Prior to version 26.5. | |
CVE-2026-54272 |
medium | 6.9 | 0.0040 | 2026-10-29 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | |
CVE-2026-64643 |
medium | 6.3 | 0.0051 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 | |
CVE-2026-64644 |
medium | 6.3 | 0.0067 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 15.5.0 | |
CVE-2026-66029 |
medium | 5.1 | 0.0029 | 2026-10-29 | Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vul | |
CVE-2026-66030 |
medium | 5.1 | 0.0029 | 2026-10-29 | Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vu | |
CVE-2026-10683 |
medium | 4.6 | 0.0024 | 2026-10-29 | In the Synopsys DesignWare I2C driver (drivers/i2c/i2c_dw.c) operating in target/slave mod | |
CVE-2026-16481 |
medium | 6.0 | 0.0019 | 2026-10-29 | A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in t | |
CVE-2026-17612 |
medium | 6.9 | 0.0054 | 2026-10-29 | Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version | |
CVE-2026-64646 |
medium | 6.3 | 0.0052 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 | |
CVE-2026-64647 |
medium | 6.3 | 0.0032 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 | |
CVE-2026-66031 |
medium | 5.1 | 0.0029 | 2026-10-29 | Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vul | |
CVE-2026-59729 |
medium | 5.1 | 0.0047 | 2026-10-29 | Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerab | |
CVE-2026-64648 |
medium | 6.0 | 0.0034 | 2026-10-29 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 | |
CVE-2026-65618 |
medium | 6.5 | 0.0035 | 2026-10-29 | Improper URL validation when handling specific URLs, allows an attacker, under certain con | |
CVE-2026-65922 |
medium | 5.4 | 0.0034 | 2026-10-29 | An authorization weakness in JFrog Artifactory internal metadata handling could allow a us | |
CVE-2026-65923 |
medium | 6.8 | 0.0035 | 2026-10-29 | A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a u | |
CVE-2026-65924 |
medium | 6.5 | 0.0041 | 2026-10-29 | JFrog Artifactory support for Terraform remote repositories was found to be susceptible to | |
CVE-2026-65925 |
medium | 6.5 | 0.0040 | 2026-10-29 | A user with JFrog Artifactory Cargo remote repository read access could make Artifactory r | |
CVE-2026-66018 |
medium | 6.5 | 0.0045 | 2026-10-29 | Build readers can access another repository's environment properties. A caller with read a | |
CVE-2026-20672 |
medium | 5.5 | 0.0017 | 2026-10-29 | An information disclosure issue was addressed with improved privacy controls. This issue i | |
CVE-2026-28849 |
medium | 5.5 | 0.0016 | 2026-10-29 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-28900 |
medium | 5.5 | 0.0016 | 2026-10-29 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macO | |
CVE-2026-28932 |
medium | 5.5 | 0.0016 | 2026-10-29 | A logic issue existed resulting in memory corruption. This was addressed with improved sta | |
CVE-2026-43665 |
medium | 5.5 | 0.0013 | 2026-10-29 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS | |
CVE-2026-43738 |
medium | 5.5 | 0.0017 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 | |
CVE-2026-43754 |
medium | 5.5 | 0.0016 | 2026-10-29 | This issue was addressed with improved redaction of sensitive information. This issue is f | |
CVE-2026-43756 |
medium | 5.5 | 0.0016 | 2026-10-29 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia | |
CVE-2026-43763 |
medium | 5.5 | 0.0015 | 2026-10-29 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in | |
CVE-2026-43765 |
medium | 5.5 | 0.0018 | 2026-10-29 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS | |
CVE-2026-43766 |
medium | 4.6 | 0.0020 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-43767 |
medium | 5.0 | 0.0015 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43768 |
medium | 5.5 | 0.0016 | 2026-10-29 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43774 |
medium | 5.5 | 0.0016 | 2026-10-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43775 |
medium | 5.5 | 0.0015 | 2026-10-29 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-43781 |
medium | 4.7 | 0.0011 | 2026-10-29 | A race condition was addressed with improved state handling. This issue is fixed in macOS | |
CVE-2026-43782 |
medium | 5.5 | 0.0016 | 2026-10-29 | This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8 | |
CVE-2026-43806 |
medium | 5.5 | 0.0014 | 2026-10-29 | A denial of service issue was addressed by removing the vulnerable code. This issue is fix | |
CVE-2026-43811 |
medium | 4.7 | 0.0011 | 2026-10-29 | A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 an | |
CVE-2026-43819 |
medium | 5.5 | 0.0016 | 2026-10-29 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in | |
CVE-2026-59728 |
medium | 4.3 | 0.0032 | 2026-10-29 | Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, th | |
CVE-2026-64699 |
medium | 5.5 | 0.0016 | 2026-10-29 | A memory initialization issue was addressed with improved memory handling. This issue is f | |
CVE-2026-64708 |
medium | 5.5 | 0.0017 | 2026-10-29 | A file quarantine bypass was addressed with additional checks. This issue is fixed in macO |