Browse All CVEs
14,383 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-35585 |
high | 8.6 | 0.0045 | 2026-10-29 | Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentica | |
CVE-2024-7956 |
high | 7.6 | 0.0035 | 2026-10-29 | A vulnerability exists in the affected products that allows a threat actor to gain access | |
CVE-2026-80465 |
high | 8.7 | 0.0028 | 2026-10-29 | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < | |
CVE-2026-85197 |
high | 7.6 | 0.0034 | 2026-10-29 | A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attac | |
CVE-2026-6554 |
high | 7.5 | 0.0044 | 2026-10-29 | libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed intege | |
CVE-2026-79678 |
high | 8.1 | 0.0090 | 2026-10-29 | A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organizati | |
CVE-2026-74860 |
high | 8.5 | 0.0066 | 2026-10-29 | A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit | |
CVE-2026-20293 |
high | 7.1 | 0.0018 | 2026-10-29 | A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation o | |
CVE-2024-58380 |
high | 7.1 | 0.0053 | 2026-10-29 | PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEdit | |
CVE-2024-58381 |
high | 8.7 | 0.0077 | 2026-10-29 | PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON | |
CVE-2024-58382 |
high | 8.7 | 0.0049 | 2026-10-29 | league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities | |
CVE-2026-18147 |
high | 8.1 | 0.0058 | 2026-10-29 | A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross- | |
CVE-2025-57231 |
high | 7.5 | 0.0173 | 2026-10-29 | Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated maliciou | |
CVE-2026-70341 |
high | 8.5 | 0.0064 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute | |
CVE-2026-90648 |
high | 7.1 | 0.0019 | 2026-10-29 | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that pr | |
CVE-2024-58383 |
high | 8.4 | 0.0015 | 2026-10-29 | Froxlor before 2.2.0 (affected up to and including 2.2.0-rc3) generates /etc/pure-ftpd/db/ | |
CVE-2025-66974 |
high | 7.5 | 0.0053 | 2026-10-29 | An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Vers | |
CVE-2026-19667 |
high | 7.5 | 0.0057 | 2026-10-29 | If an attacker-controlled authoritative server can produce a negative answer that is exact | |
CVE-2026-77692 |
high | 7.5 | 0.0656 | 2026-10-29 | An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a | |
CVE-2026-81563 |
high | 7.5 | 0.0057 | 2026-10-29 | A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HT | |
CVE-2026-81736 |
high | 7.5 | 0.0057 | 2026-10-29 | If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried | |
CVE-2026-19666 |
high | 7.5 | 0.0057 | 2026-10-29 | On a resolver configured to use ``dns64``, if an applicable answer from the authoritative | |
CVE-2026-76163 |
high | 7.5 | 0.0057 | 2026-10-29 | If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an | |
CVE-2026-80274 |
high | 7.5 | 0.0057 | 2026-10-29 | If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authorita | |
CVE-2026-86320 |
high | 7.8 | 0.0030 | 2026-10-29 | A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch s | |
CVE-2026-92925 |
high | 7.1 | 0.0071 | 2026-10-29 | A flaw was found in Redis community. The cluster bus packet parser, responsible for handli | |
CVE-2026-95619 |
high | 7.7 | 0.0044 | 2026-10-29 | A flaw was found in libstdc++. An integer overflow can occur when processing large inputs | |
CVE-2026-94640 |
high | 7.5 | 0.0046 | 2026-10-29 | A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker | |
CVE-2026-96442 |
high | 7.8 | 0.0020 | 2026-10-29 | A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mo | |
CVE-2026-96512 |
high | 7.8 | 0.0032 | 2026-10-29 | 2 PoC | A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access r |
CVE-2026-96275 |
high | 8.8 | 0.0057 | 2026-10-29 | A malicious or compromised Flatpak repository can write attacker-controlled content to arb | |
CVE-2026-75887 |
high | 7.5 | 0.0053 | 2026-10-29 | A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path | |
CVE-2026-98093 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: bal | |
CVE-2026-98096 |
high | 7.4 | 0.0050 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore net | |
CVE-2026-98110 |
high | 7.1 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: b | |
CVE-2026-98111 |
high | 7.1 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: v | |
CVE-2026-98112 |
high | 7.8 | 0.0009 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener t | |
CVE-2026-98116 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize | |
CVE-2026-98117 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix poten | |
CVE-2026-98118 |
high | 7.1 | 0.0009 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead | |
CVE-2026-98122 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-a | |
CVE-2026-98130 |
high | 8.1 | 0.0045 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU ra | |
CVE-2026-98143 |
high | 7.8 | 0.0011 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't | |
CVE-2026-100208 |
high | 7.5 | 0.0045 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker | |
CVE-2026-91765 |
high | 7.5 | 0.0038 | 2026-10-29 | cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no dept | |
CVE-2026-97164 |
high | 7.0 | 0.0032 | 2026-10-29 | Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` | |
CVE-2026-96280 |
high | 7.5 | 0.0059 | 2026-10-29 | The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocati | |
CVE-2026-100750 |
high | 8.5 | 0.0019 | 2026-10-29 | Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joom | |
CVE-2026-100751 |
high | 7.5 | 0.0018 | 2026-10-29 | Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in | |
CVE-2026-102010 |
high | 7.0 | 0.0034 | 2026-10-29 | A flaw was found in GCC. When an application calls the erase_if function on a binary heap |