Browse All CVEs
14,300 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-112304 |
high | 7.7 | 0.0037 | 2026-10-29 | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_pa | |
CVE-2026-112309 |
high | 8.7 | 0.0040 | 2026-10-29 | @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that all | |
CVE-2026-10572 |
high | 8.8 | 0.0045 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially e | |
CVE-2026-10574 |
high | 8.8 | 0.0044 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially e | |
CVE-2026-10743 |
high | 8.8 | 0.0028 | 2026-10-29 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memor | |
CVE-2026-111064 |
high | 8.2 | 0.0040 | 2026-10-29 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | |
CVE-2026-12148 |
high | 8.8 | 0.0040 | 2026-10-29 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or pote | |
CVE-2026-17510 |
high | 7.5 | 0.0061 | 2026-10-29 | Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in p | |
CVE-2026-10595 |
high | 7.5 | 0.0062 | 2026-10-29 | A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in th | |
CVE-2026-19341 |
high | 7.4 | 0.0060 | 2026-10-29 | A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This im | |
CVE-2026-19346 |
high | 7.4 | 0.0273 | 2026-10-29 | A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the funct | |
CVE-2026-19348 |
high | 8.9 | 0.0357 | 2026-10-29 | A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Imp | |
CVE-2026-19381 |
high | 7.1 | 0.0016 | 2026-10-29 | A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. T | |
CVE-2026-13133 |
high | 8.4 | 0.0017 | 2026-10-29 | A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26 | |
CVE-2026-14237 |
high | 7.2 | 0.0046 | 2026-10-29 | The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin before 3.5.0 do not p | |
CVE-2026-64940 |
high | 8.8 | 0.0040 | 2026-10-29 | Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability d | |
CVE-2026-21064 |
high | 7.0 | 0.0012 | 2026-10-29 | Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers t | |
CVE-2026-21068 |
high | 8.4 | 0.0017 | 2026-10-29 | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privil | |
CVE-2026-21074 |
high | 7.2 | 0.0014 | 2026-10-29 | Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to | |
CVE-2026-21079 |
high | 7.0 | 0.0010 | 2026-10-29 | Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adja | |
CVE-2026-44630 |
high | 7.5 | 0.0059 | 2026-10-29 | Improper validation of length fields in the Apache IoTDB RPC service may allow a remote un | |
CVE-2026-55814 |
high | 7.5 | 0.0066 | 2026-10-29 | Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are reco | |
CVE-2026-61899 |
high | 7.5 | 0.0071 | 2026-10-29 | Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers | |
CVE-2026-65942 |
high | 7.5 | 0.0059 | 2026-10-29 | TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users a | |
CVE-2026-65948 |
high | 7.3 | 0.0062 | 2026-10-29 | UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth | |
CVE-2026-72566 |
high | 7.7 | 0.0035 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 a | |
CVE-2026-72571 |
high | 7.5 | 0.0115 | 2026-10-29 | A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an una | |
CVE-2026-72572 |
high | 7.5 | 0.0115 | 2026-10-29 | A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated re | |
CVE-2026-72573 |
high | 8.8 | 0.0157 | 2026-10-29 | An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authentic | |
CVE-2026-72578 |
high | 8.8 | 0.0026 | 2026-10-29 | A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unau | |
CVE-2026-72579 |
high | 7.5 | 0.0110 | 2026-10-29 | An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjac | |
CVE-2026-72581 |
high | 8.6 | 0.0050 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb | |
CVE-2026-72582 |
high | 7.5 | 0.0061 | 2026-10-29 | A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthent | |
CVE-2026-72584 |
high | 7.4 | 0.0039 | 2026-10-29 | A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows a | |
CVE-2026-72586 |
high | 7.5 | 0.0063 | 2026-10-29 | A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthen | |
CVE-2026-72591 |
high | 7.7 | 0.0037 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows a | |
CVE-2026-72594 |
high | 7.6 | 0.0028 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 all | |
CVE-2026-12984 |
high | 8.2 | 0.0034 | 2026-10-29 | Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrie | |
CVE-2026-59233 |
high | 8.7 | 0.0041 | 2026-10-29 | Missing Authorization in the permission management component in Roskus Prospero Flow CRM b | |
CVE-2026-6374 |
high | 7.3 | 0.0025 | 2026-10-29 | Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitiv | |
CVE-2026-72688 |
high | 7.5 | 0.0061 | 2026-10-29 | A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allow | |
CVE-2026-72689 |
high | 7.5 | 0.0053 | 2026-10-29 | A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2 | |
CVE-2026-72690 |
high | 7.1 | 0.0041 | 2026-10-29 | An improper authorization vulnerability in Attendize through commit 9289acb allows an auth | |
CVE-2026-72691 |
high | 7.5 | 0.0065 | 2026-10-29 | An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allow | |
CVE-2026-72692 |
high | 7.5 | 0.0044 | 2026-10-29 | A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows | |
CVE-2026-19433 |
high | 8.6 | 0.0044 | 2026-10-29 | Authorization Bypass Through User-Controlled Key in the contact management component in Ro | |
CVE-2026-48048 |
high | 7.5 | 0.0201 | 2026-10-29 | XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-v | |
CVE-2026-72718 |
high | 7.0 | 0.0022 | 2026-10-29 | goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose r | |
CVE-2026-71576 |
high | 8.5 | 0.0029 | 2026-10-29 | A flaw was found in multicluster-global-hub. The manager component improperly validates th | |
CVE-2026-10754 |
high | 8.6 | 0.0078 | 2026-10-29 | Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryp |