Browse All CVEs
3,499 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-91490 |
critical | 9.1 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware | |
CVE-2026-91491 |
critical | 9.8 | 0.0035 | 2026-10-29 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware | |
CVE-2026-91622 |
critical | 9.3 | 0.0022 | 2026-10-29 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac | |
CVE-2026-91637 |
critical | 9.9 | 0.0035 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91638 |
critical | 9.9 | 0.0040 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91644 |
critical | 9.3 | 0.0022 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91655 |
critical | 9.1 | 0.0021 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91656 |
critical | 9.1 | 0.0020 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version | |
CVE-2026-91658 |
critical | 9.9 | 0.0034 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91663 |
critical | 9.9 | 0.0034 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-91665 |
critical | 9.8 | 0.0047 | 2026-10-29 | Vulnerability in Oracle Essbase (component: Security). The supported version that is aff | |
CVE-2026-92559 |
critical | 9.8 | 0.0053 | 2026-10-29 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obta | |
CVE-2026-113736 |
critical | 9.3 | 0.0092 | 2026-10-29 | A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the | |
CVE-2026-114053 |
critical | 9.2 | 0.0046 | 2026-10-29 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revis | |
CVE-2026-114087 |
critical | 9.2 | 0.0051 | 2026-10-29 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets | |
CVE-2026-114108 |
critical | 9.3 | 0.0053 | 2026-10-29 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability | |
CVE-2026-114119 |
critical | 9.3 | 0.0043 | 2026-10-29 | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server | |
CVE-2026-113744 |
critical | 10.0 | 0.0062 | 2026-10-29 | A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element | |
CVE-2026-71195 |
critical | 9.9 | 0.0048 | 2026-10-29 | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not | |
CVE-2026-87095 |
critical | 9.1 | 0.0024 | 2026-10-29 | Sensitive information disclosure and manipulation due to improper authorization checks. Th | |
CVE-2026-48830 |
critical | 9.1 | 0.0026 | 2026-10-29 | Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated atta | |
CVE-2026-56388 |
critical | 9.1 | 0.0029 | 2026-10-29 | The Redis server command parser in Apache bRPC accepts an empty RESP array as a command he | |
CVE-2026-114403 |
critical | 9.2 | 0.0070 | 2026-10-29 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability | |
CVE-2026-109618 |
critical | 9.2 | 1.0000 | 2026-10-29 | KEV 726 PoC | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated rem |
CVE-2026-109619 |
critical | 9.2 | 1.0000 | 2026-10-29 | KEV | PHP contains a stale internal request-state vulnerability that allows for unauthenticated |
CVE-2026-113788 |
critical | 9.4 | 0.0039 | 2026-10-29 | Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a | |
CVE-2026-20043 |
critical | 9.0 | 0.0036 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-76466 |
critical | 9.8 | 0.0042 | 2026-10-29 | A vulnerability in the database service feature of Cisco Expressway Series could allow an | |
CVE-2026-76473 |
critical | 9.8 | 0.0049 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, engineeri | |
CVE-2026-76474 |
critical | 9.8 | 0.0047 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, engineeri | |
CVE-2026-76475 |
critical | 9.3 | 0.0033 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, engineeri | |
CVE-2026-105869 |
critical | 9.2 | 0.0030 | 2026-10-29 | Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles li | |
CVE-2026-111183 |
critical | 9.8 | 0.0070 | 2026-10-29 | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This | |
CVE-2026-114493 |
critical | 9.2 | 0.0038 | 2026-10-29 | LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in cor | |
CVE-2026-89035 |
critical | 9.1 | 0.0027 | 2026-10-29 | MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebF | |
CVE-2025-31699 |
critical | 9.1 | 0.0035 | 2026-10-29 | Apache Traffic Server can return an origin connection to the shared pool while the origin | |
CVE-2026-105944 |
critical | 10.0 | 0.0070 | 2026-10-29 | Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has it | |
CVE-2026-111813 |
critical | 10.0 | 0.0049 | 2026-10-29 | Apache Traffic Server's experimental magick plugin lets an unauthenticated client control | |
CVE-2026-111816 |
critical | 9.2 | 0.0031 | 2026-10-29 | Apache Traffic Server forwarded a malformed 302 response that should have been rejected as | |
CVE-2026-114268 |
critical | 9.4 | 0.0051 | 2026-10-29 | A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the | |
CVE-2026-111809 |
critical | 9.3 | 0.0022 | 2026-10-29 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length | |
CVE-2026-111811 |
critical | 9.4 | 0.0036 | 2026-10-29 | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read | |
CVE-2026-112408 |
critical | 9.4 | 0.0074 | 2026-10-29 | Missing verification of source of a communication channel in the default_bucket() function | |
CVE-2026-114139 |
critical | 9.1 | 0.0051 | 2026-10-29 | Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10. | |
CVE-2026-96639 |
critical | 9.8 | 0.0066 | 2026-10-29 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can reta | |
CVE-2026-114382 |
critical | 10.0 | 0.0067 | 2026-10-29 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the functi | |
CVE-2026-114383 |
critical | 10.0 | 0.0065 | 2026-10-29 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function se | |
CVE-2026-114509 |
critical | 9.2 | 0.0078 | 2026-10-29 | 6 PoC | Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configure |
CVE-2026-91403 |
critical | 9.1 | 0.0037 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-94140 |
critical | 9.1 | 0.0025 | 2026-10-29 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync trans |