Browse All CVEs
14,373 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-97237 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-84682 |
high | 7.7 | 0.0121 | 2026-10-29 | A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer A | |
CVE-2026-15999 |
high | 8.2 | 0.0022 | 2026-10-29 | Improper validation of integrity check value in the AES-CCM implementation (CcmParameters | |
CVE-2026-16000 |
high | 8.7 | 0.0022 | 2026-10-29 | Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in L | |
CVE-2026-16001 |
high | 8.2 | 0.0015 | 2026-10-29 | Exposure of the message authentication key through the encryption keystream in the stream | |
CVE-2026-63566 |
high | 8.7 | 0.0043 | 2026-10-29 | Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliable | |
CVE-2026-63567 |
high | 8.2 | 0.0045 | 2026-10-29 | Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-cs | |
CVE-2026-63568 |
high | 8.7 | 0.0036 | 2026-10-29 | Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC ve | |
CVE-2026-103600 |
high | 8.7 | 0.0036 | 2026-10-29 | Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion o | |
CVE-2026-103601 |
high | 8.2 | 0.0029 | 2026-10-29 | Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCi | |
CVE-2026-103602 |
high | 8.2 | 0.0023 | 2026-10-29 | Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Cas | |
CVE-2026-103603 |
high | 8.7 | 0.0052 | 2026-10-29 | Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyPar | |
CVE-2026-103604 |
high | 8.7 | 0.0032 | 2026-10-29 | Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name | |
CVE-2026-63570 |
high | 7.1 | 0.0023 | 2026-10-29 | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the B | |
CVE-2026-63571 |
high | 8.7 | 0.0014 | 2026-10-29 | Improper verification of cryptographic signature in the attribute certificate path validat | |
CVE-2026-63572 |
high | 7.1 | 0.0038 | 2026-10-29 | Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in L | |
CVE-2026-63573 |
high | 8.2 | 0.0030 | 2026-10-29 | Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientI | |
CVE-2026-63574 |
high | 8.7 | 0.0043 | 2026-10-29 | Memory allocation with excessive size value in the OpenPGP signature and user attribute su | |
CVE-2026-63575 |
high | 7.1 | 0.0022 | 2026-10-29 | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenera | |
CVE-2026-63576 |
high | 8.2 | 0.0021 | 2026-10-29 | Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Leg | |
CVE-2026-63577 |
high | 8.2 | 0.0021 | 2026-10-29 | Improper certificate validation in the directoryName name-constraint check (PkixNameConstr | |
CVE-2026-63578 |
high | 7.1 | 0.0038 | 2026-10-29 | Allocation of resources without limits in password-based private-key decryption (PbeUtilit | |
CVE-2026-94422 |
high | 8.7 | 0.0050 | 2026-10-29 | An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 a | |
CVE-2026-105773 |
high | 7.3 | 0.0014 | 2026-10-29 | Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulner | |
CVE-2026-39769 |
high | 7.5 | 0.0049 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs G | |
CVE-2026-98166 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped- | |
CVE-2026-106110 |
high | 7.5 | 0.0039 | 2026-10-29 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encode | |
CVE-2026-106112 |
high | 7.5 | 0.0039 | 2026-10-29 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts | |
CVE-2026-106113 |
high | 7.5 | 0.0039 | 2026-10-29 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied | |
CVE-2026-106115 |
high | 7.5 | 0.0039 | 2026-10-29 | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encode | |
CVE-2026-106117 |
high | 7.5 | 0.0039 | 2026-10-29 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using C | |
CVE-2026-106457 |
high | 8.1 | 0.0035 | 2026-10-29 | Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the | |
CVE-2026-106488 |
high | 8.1 | 0.0028 | 2026-10-29 | Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backs | |
CVE-2026-98374 |
high | 8.8 | 0.0029 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-fr | |
CVE-2025-70517 |
high | 8.8 | 0.0020 | 2026-10-29 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-o | |
CVE-2025-70522 |
high | 8.8 | 0.0020 | 2026-10-29 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-o | |
CVE-2026-106565 |
high | 7.5 | 0.0042 | 2026-10-29 | ImageMagick is free and open-source software used for editing and manipulating digital ima | |
CVE-2026-106567 |
high | 7.5 | 0.0042 | 2026-10-29 | ImageMagick is free and open-source software used for editing and manipulating digital ima | |
CVE-2026-93017 |
high | 7.7 | 0.0045 | 2026-10-29 | The `insights-operator-gather` ClusterRole grants the operator's service account read acce | |
CVE-2026-106433 |
high | 8.7 | 0.0026 | 2026-10-29 | Improper state management in MongoDB libmongocrypt can cause provider-specific data to be | |
CVE-2026-107324 |
high | 8.2 | 0.0023 | 2026-10-29 | An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a run | |
CVE-2026-107325 |
high | 8.2 | 0.0024 | 2026-10-29 | Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bo | |
CVE-2026-83943 |
high | 8.7 | 0.0054 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Azure API Center allows an u | |
CVE-2026-98376 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_me | |
CVE-2026-98378 |
high | 7.8 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled l | |
CVE-2026-98381 |
high | 7.8 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP prog | |
CVE-2026-98382 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound | |
CVE-2026-98383 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb | |
CVE-2025-61560 |
high | 8.1 | 0.0032 | 2026-10-29 | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Found | |
CVE-2026-83526 |
high | 8.8 | 0.0063 | 2026-10-29 | The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all version |