Browse All CVEs
14,391 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-17171 |
high | 7.8 | 0.0017 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite ar | |
CVE-2026-17422 |
high | 8.8 | 0.0017 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbi | |
CVE-2026-17425 |
high | 7.5 | 0.0055 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-18824 |
high | 8.8 | 0.0063 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker | |
CVE-2026-18828 |
high | 7.5 | 0.0056 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-18840 |
high | 7.8 | 0.0017 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbi | |
CVE-2026-18842 |
high | 7.8 | 0.0015 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevate | |
CVE-2026-19442 |
high | 8.8 | 0.0016 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the | |
CVE-2026-19446 |
high | 7.5 | 0.0146 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can | |
CVE-2026-19448 |
high | 7.5 | 0.0035 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exis | |
CVE-2026-19449 |
high | 8.8 | 0.0014 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow | |
CVE-2026-19783 |
high | 7.8 | 0.0016 | 2026-10-29 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel | |
CVE-2026-46355 |
high | 7.1 | 0.0037 | 2026-10-29 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed | |
CVE-2026-46682 |
high | 8.5 | 0.0058 | 2026-10-29 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed | |
CVE-2026-49217 |
high | 7.5 | 0.0036 | 2026-10-29 | Mailu is a mail server as a set of Docker images. Prior to version 2024.06.52, a missing a | |
CVE-2026-55765 |
high | 8.5 | 0.0050 | 2026-10-29 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes envi | |
CVE-2026-72818 |
high | 8.7 | 0.0074 | 2026-10-29 | The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_ | |
CVE-2026-77646 |
high | 7.7 | 0.0044 | 2026-10-29 | A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDML | |
CVE-2026-16520 |
high | 8.7 | 0.0054 | 2026-10-29 | Improper input validation and Exposure of sensitive information through data queries vulne | |
CVE-2026-73267 |
high | 7.7 | 0.0063 | 2026-10-29 | A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A | |
CVE-2026-65644 |
high | 7.5 | 0.0048 | 2026-10-29 | Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and | |
CVE-2026-18781 |
high | 8.1 | 0.0054 | 2026-10-29 | The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 | |
CVE-2026-16323 |
high | 7.5 | 0.0063 | 2026-10-29 | Execution after redirect (EAR) vulnerability in FuyaWeb Internet and Informatics Services | |
CVE-2026-77768 |
high | 7.1 | 0.0042 | 2026-10-29 | The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId a | |
CVE-2026-77769 |
high | 7.1 | 0.0042 | 2026-10-29 | The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and | |
CVE-2026-76612 |
high | 8.6 | 0.0044 | 2026-10-29 | Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in | |
CVE-2026-74580 |
high | 8.8 | 0.0041 | 2026-10-29 | 4 PoC | In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vrin |
CVE-2026-66917 |
high | 8.6 | 0.0052 | 2026-10-29 | Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authent | |
CVE-2026-76596 |
high | 8.7 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fab | |
CVE-2026-76597 |
high | 8.7 | 0.0044 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via li | |
CVE-2026-76598 |
high | 8.7 | 0.0046 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_g | |
CVE-2026-76599 |
high | 8.7 | 0.0041 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix dis | |
CVE-2026-77027 |
high | 8.6 | 0.0044 | 2026-10-29 | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handl | |
CVE-2026-74632 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix h | |
CVE-2026-78314 |
high | 8.8 | 0.0066 | 2026-10-29 | SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. | |
CVE-2026-28151 |
high | 8.1 | 0.0047 | 2026-10-29 | Unauthenticated Local File Inclusion in Tonda < 2.6 versions. | |
CVE-2026-28152 |
high | 8.1 | 0.0047 | 2026-10-29 | Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions. | |
CVE-2026-28167 |
high | 7.5 | 0.0050 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-66585 |
high | 7.5 | 0.0042 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions. | |
CVE-2026-78376 |
high | 8.8 | 0.0047 | 2026-10-29 | A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free | |
CVE-2026-66907 |
high | 7.5 | 0.0081 | 2026-10-29 | Relative path traversal vulnerability in Apache Camel Google Storage component. This is | |
CVE-2026-66908 |
high | 7.5 | 0.0061 | 2026-10-29 | Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. Thi | |
CVE-2026-32560 |
high | 8.8 | 0.0046 | 2026-10-29 | Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and | |
CVE-2026-19949 |
high | 8.8 | 0.0096 | 2026-10-29 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection | |
CVE-2025-29419 |
high | 7.1 | 0.0029 | 2026-10-29 | CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack. | |
CVE-2025-56798 |
high | 8.8 | 0.0032 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS versi | |
CVE-2025-61162 |
high | 7.5 | 0.0036 | 2026-10-29 | Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwri | |
CVE-2025-61164 |
high | 7.5 | 0.0032 | 2026-10-29 | Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket End | |
CVE-2025-61479 |
high | 7.5 | 0.0043 | 2026-10-29 | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a | |
CVE-2025-61480 |
high | 7.5 | 0.0018 | 2026-10-29 | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a |