Browse All CVEs
14,312 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-96231 |
high | 7.8 | 0.0041 | 2026-10-29 | Improper link resolution before file access ('link following') in .NET allows an authorize | |
CVE-2026-96232 |
high | 7.5 | 0.0089 | 2026-10-29 | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a | |
CVE-2026-96233 |
high | 7.5 | 0.0099 | 2026-10-29 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a | |
CVE-2026-96235 |
high | 8.8 | 0.0086 | 2026-10-29 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network | |
CVE-2026-96237 |
high | 7.5 | 0.0064 | 2026-10-29 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized at | |
CVE-2026-96251 |
high | 8.8 | 0.0069 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unau | |
CVE-2026-96861 |
high | 7.5 | 0.0112 | 2026-10-29 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized atta | |
CVE-2026-96862 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privi | |
CVE-2026-96866 |
high | 7.5 | 0.0112 | 2026-10-29 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized atta | |
CVE-2026-96867 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. | |
CVE-2026-96868 |
high | 7.0 | 0.0025 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-96911 |
high | 7.8 | 0.0055 | 2026-10-29 | Improper link resolution before file access ('link following') in Microsoft Windows Search | |
CVE-2026-96912 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows Client License Service allows an authorized attacker to elevate | |
CVE-2026-96913 |
high | 8.8 | 0.0037 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-96914 |
high | 8.8 | 0.0033 | 2026-10-29 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allo | |
CVE-2026-96957 |
high | 8.8 | 0.0053 | 2026-10-29 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker t | |
CVE-2026-96958 |
high | 7.5 | 0.0120 | 2026-10-29 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service | |
CVE-2026-96959 |
high | 7.5 | 0.0097 | 2026-10-29 | Allocation of resources without limits or throttling in .NET allows an unauthorized attack | |
CVE-2026-96960 |
high | 7.5 | 0.0120 | 2026-10-29 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to | |
CVE-2026-83661 |
high | 7.8 | 0.0021 | 2026-10-29 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that coul | |
CVE-2026-93905 |
high | 8.2 | 0.0033 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unaut | |
CVE-2026-95635 |
high | 7.8 | 0.0021 | 2026-10-29 | Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrar | |
CVE-2026-95636 |
high | 7.8 | 0.0021 | 2026-10-29 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that coul | |
CVE-2026-95637 |
high | 7.8 | 0.0018 | 2026-10-29 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in | |
CVE-2026-95638 |
high | 7.8 | 0.0023 | 2026-10-29 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could res | |
CVE-2026-95639 |
high | 8.6 | 0.0020 | 2026-10-29 | Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could resul | |
CVE-2026-95641 |
high | 7.8 | 0.0018 | 2026-10-29 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in | |
CVE-2026-95696 |
high | 7.5 | 0.0033 | 2026-10-29 | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remot | |
CVE-2026-96521 |
high | 7.8 | 0.0018 | 2026-10-29 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in | |
CVE-2026-110690 |
high | 8.7 | 0.0090 | 2026-10-29 | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vuln | |
CVE-2026-98401 |
high | 7.5 | 0.0060 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix st | |
CVE-2026-98405 |
high | 8.1 | 0.0048 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix miss | |
CVE-2026-98419 |
high | 7.0 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out | |
CVE-2025-71433 |
high | 7.7 | 0.0057 | 2026-10-29 | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticate | |
CVE-2026-110613 |
high | 7.1 | 0.0042 | 2026-10-29 | youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that all | |
CVE-2026-102479 |
high | 8.7 | 0.0034 | 2026-10-29 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x H | |
CVE-2026-110829 |
high | 7.1 | 0.0031 | 2026-10-29 | FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd | |
CVE-2026-110830 |
high | 8.2 | 0.0032 | 2026-10-29 | FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, al | |
CVE-2026-110832 |
high | 7.1 | 0.0031 | 2026-10-29 | FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_dr | |
CVE-2026-110833 |
high | 8.2 | 0.0032 | 2026-10-29 | FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits | |
CVE-2026-110834 |
high | 7.1 | 0.0031 | 2026-10-29 | FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that al | |
CVE-2026-110836 |
high | 7.1 | 0.0031 | 2026-10-29 | FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_ | |
CVE-2026-110838 |
high | 8.7 | 0.0033 | 2026-10-29 | FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Ac | |
CVE-2026-110839 |
high | 7.1 | 0.0027 | 2026-10-29 | FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based o | |
CVE-2026-110845 |
high | 7.7 | 0.0034 | 2026-10-29 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution | |
CVE-2026-110865 |
high | 7.1 | 0.0019 | 2026-10-29 | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository | |
CVE-2026-76066 |
high | 8.7 | 0.0044 | 2026-10-29 | IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnera | |
CVE-2026-77931 |
high | 8.7 | 0.0100 | 2026-10-29 | MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers | |
CVE-2024-22031 |
high | 8.5 | 0.0043 | 2026-10-29 | A vulnerability has been identified within Rancher where a user with the ability to create | |
CVE-2026-55103 |
high | 8.6 | 0.0020 | 2026-10-29 | Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abd |