Browse All CVEs
14,252 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18639 |
high | 7.3 | 0.0039 | 2026-10-29 | When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email c | |
CVE-2026-18640 |
high | 7.1 | 0.0043 | 2026-10-29 | The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticate | |
CVE-2026-42142 |
high | 7.1 | 0.0037 | 2026-10-29 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, the `handleGetSheets` API hand | |
CVE-2026-48495 |
high | 7.1 | 0.0035 | 2026-10-29 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OAuth callba | |
CVE-2026-48766 |
high | 7.6 | 0.0043 | 2026-10-29 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest me | |
CVE-2026-53413 |
high | 8.3 | 0.0049 | 2026-10-29 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, w | |
CVE-2026-53415 |
high | 8.3 | 0.0049 | 2026-10-29 | Use after Free in the annotator function of Zoom Clients may allow a meeting participant t | |
CVE-2026-53416 |
high | 7.1 | 0.0021 | 2026-10-29 | Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct i | |
CVE-2026-56721 |
high | 8.7 | 0.0052 | 2026-10-29 | CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via in | |
CVE-2026-67179 |
high | 7.8 | 0.0021 | 2026-10-29 | Genkit does not properly validate host request headers. Any host on the developer's networ | |
CVE-2026-67180 |
high | 7.5 | 0.0023 | 2026-10-29 | Google Turbinia allows arbitrary command execution via worker tasks. An attacker with priv | |
CVE-2026-6726 |
high | 7.9 | 0.0019 | 2026-10-29 | An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that c | |
CVE-2026-73079 |
high | 8.5 | 0.0039 | 2026-10-29 | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI | |
CVE-2026-20349 |
high | 8.6 | 0.0101 | 2026-10-29 | KEV | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense |
CVE-2026-47299 |
high | 7.2 | 0.0101 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Azu | |
CVE-2026-47704 |
high | 7.1 | 0.0056 | 2026-10-29 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has | |
CVE-2026-49179 |
high | 8.8 | 0.0086 | 2026-10-29 | 1 PoC | Improper neutralization of special elements used in a command ('command injection') in Win |
CVE-2026-54981 |
high | 7.8 | 0.0047 | 2026-10-29 | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python ex | |
CVE-2026-57104 |
high | 8.8 | 0.0086 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Az | |
CVE-2026-57105 |
high | 8.0 | 0.0062 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-58650 |
high | 7.8 | 0.0032 | 2026-10-29 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthori | |
CVE-2026-59113 |
high | 8.8 | 0.0076 | 2026-10-29 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute cod | |
CVE-2026-59133 |
high | 8.8 | 0.0091 | 2026-10-29 | Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack a | |
CVE-2026-62752 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate pr | |
CVE-2026-62772 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) a | |
CVE-2026-62785 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows | |
CVE-2026-62795 |
high | 8.8 | 0.0082 | 2026-10-29 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthori | |
CVE-2026-62799 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate | |
CVE-2026-62869 |
high | 8.8 | 0.0044 | 2026-10-29 | Insufficient verification of data authenticity in Azure Entra ID allows an authorized atta | |
CVE-2026-62871 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | |
CVE-2026-62877 |
high | 7.8 | 0.0033 | 2026-10-29 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate pri | |
CVE-2026-62886 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileg | |
CVE-2026-62897 |
high | 7.0 | 0.0037 | 2026-10-29 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execut | |
CVE-2026-62898 |
high | 7.5 | 0.0103 | 2026-10-29 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information o | |
CVE-2026-62901 |
high | 7.5 | 0.0123 | 2026-10-29 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service | |
CVE-2026-62909 |
high | 7.8 | 0.0034 | 2026-10-29 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | |
CVE-2026-63522 |
high | 7.8 | 0.0030 | 2026-10-29 | Incorrect permission assignment for critical resource in Azure SQL Database allows an auth | |
CVE-2026-65660 |
high | 8.8 | 0.0819 | 2026-10-29 | KEV 2 PoC | Microsoft SharePoint contains a code injection vulnerability which could allow an authoriz |
CVE-2026-65673 |
high | 7.8 | 0.0032 | 2026-10-29 | Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to e | |
CVE-2026-65675 |
high | 7.1 | 0.0064 | 2026-10-29 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized | |
CVE-2026-65767 |
high | 8.8 | 0.0061 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-65768 |
high | 8.8 | 0.0094 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsof | |
CVE-2026-65811 |
high | 8.8 | 0.0096 | 2026-10-29 | Improper input validation in Power BI allows an authorized attacker to execute code over a | |
CVE-2026-65815 |
high | 8.8 | 0.0169 | 2026-10-29 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an author | |
CVE-2026-68807 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68820 |
high | 7.0 | 0.0857 | 2026-10-29 | KEV 4 PoC | Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerab |
CVE-2026-68821 |
high | 7.3 | 0.0032 | 2026-10-29 | Improper privilege management in Windows Package Manager allows an authorized attacker to | |
CVE-2026-69278 |
high | 7.8 | 0.0032 | 2026-10-29 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a | |
CVE-2026-69306 |
high | 8.2 | 0.0054 | 2026-10-29 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacke | |
CVE-2026-69320 |
high | 8.8 | 0.0086 | 2026-10-29 | Improper neutralization of special elements used in an os command ('os command injection') |