Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-103906 |
high | 7.8 | 0.0031 | 2026-11-09 | Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticat | |
CVE-2026-121686 |
critical | 9.8 | 0.0075 | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthe | |
CVE-2026-121685 |
critical | 9.8 | 0.0048 | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets o | |
CVE-2026-118492 |
low | 2.0 | 0.0014 | 2026-11-09 | In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-esc | |
CVE-2026-43966 |
medium | 6.3 | 0.0026 | 2026-11-09 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splittin | |
CVE-2025-10248 |
high | 7.2 | 0.0032 | 2026-11-09 | XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authentic | |
CVE-2026-124959 |
high | 7.1 | 0.0013 | 2026-11-09 | The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the elem | |
CVE-2026-83151 |
critical | 9.8 | 0.0051 | 2026-11-09 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (compon | |
CVE-2026-83000 |
critical | 9.8 | 0.0051 | 2026-11-09 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (compon | |
CVE-2026-82999 |
critical | 9.9 | 0.0043 | 2026-11-09 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (compon | |
CVE-2026-82998 |
critical | 9.9 | 0.0043 | 2026-11-09 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (compon | |
CVE-2026-82997 |
critical | 9.9 | 0.0043 | 2026-11-09 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (compon | |
CVE-2026-104620 |
high | 8.5 | 0.0017 | 2026-11-09 | A path traversal attack in simulation of actions in the Zypp backend of PackageKit before | |
CVE-2026-124850 |
high | 7.3 | 0.0013 | 2026-11-09 | A SQL injection vulnerability exists in a database migration script in flowintel. The mig | |
CVE-2024-33396 |
high | 8.4 | 0.0019 | 2026-11-09 | An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitr | |
CVE-2026-124916 |
medium | 5.4 | 0.0023 | 2026-11-09 | PrestaShop contains an authenticated PHP code injection vulnerability in the back-office P | |
CVE-2026-3439 |
medium | 4.9 | 0.0028 | 2026-11-09 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate han | |
CVE-2026-0402 |
medium | 4.9 | 0.0040 | 2026-11-09 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker | |
CVE-2026-0401 |
medium | 4.9 | 0.0040 | 2026-11-09 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote at | |
CVE-2026-0400 |
medium | 4.9 | 0.0049 | 2026-11-09 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to c | |
CVE-2026-0399 |
medium | 4.9 | 0.0037 | 2026-11-09 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS ma | |
CVE-2025-40601 |
high | 7.5 | 0.0091 | 2026-11-09 | A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote | |
CVE-2025-40600 |
critical | 9.8 | 0.0098 | 2026-11-09 | Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface | |
CVE-2024-40764 |
high | 7.5 | 0.0070 | 2026-11-09 | Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticate | |
CVE-2024-29013 |
medium | 6.5 | 0.0064 | 2026-11-09 | Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated re | |
CVE-2024-29012 |
high | 7.5 | 0.0054 | 2026-11-09 | Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticat | |
CVE-2024-22394 |
critical | 9.8 | 0.0075 | 2026-11-09 | An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN | |
CVE-2023-41715 |
high | 8.8 | 0.0079 | 2026-11-09 | SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL | |
CVE-2023-41713 |
high | 7.5 | 0.0071 | 2026-11-09 | SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo functio | |
CVE-2023-41712 |
medium | 6.5 | 0.0097 | 2026-11-09 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plain | |
CVE-2023-41711 |
medium | 6.5 | 0.0097 | 2026-11-09 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp | |
CVE-2023-39280 |
medium | 6.5 | 0.0097 | 2026-11-09 | SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s. | |
CVE-2023-39279 |
medium | 6.5 | 0.0097 | 2026-11-09 | SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketRepl | |
CVE-2023-39278 |
medium | 6.5 | 0.0097 | 2026-11-09 | SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vu | |
CVE-2023-39277 |
medium | 6.5 | 0.0097 | 2026-11-09 | SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.cs | |
CVE-2023-39276 |
medium | 6.5 | 0.0097 | 2026-11-09 | SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkL | |
CVE-2023-1101 |
high | 8.8 | 0.0068 | 2026-11-09 | SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an auth | |
CVE-2023-0656 |
high | 7.5 | 0.4132 | 2026-11-09 | 1 PoC | A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated |
CVE-2022-22278 |
high | 7.5 | 0.0096 | 2026-11-09 | A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden H | |
CVE-2022-22277 |
medium | 5.3 | 0.0079 | 2026-11-09 | A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensit | |
CVE-2022-22276 |
medium | 5.3 | 0.0079 | 2026-11-09 | A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an | |
CVE-2022-22275 |
high | 7.5 | 0.0109 | 2026-11-09 | Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DM | |
CVE-2022-22274 |
critical | 9.8 | 0.7552 | 2026-11-09 | 3 PoC | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remot |
CVE-2021-20048 |
high | 8.8 | 0.0200 | 2026-11-09 | A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remot | |
CVE-2021-20046 |
high | 8.8 | 0.0200 | 2026-11-09 | A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a | |
CVE-2021-20031 |
medium | 6.1 | 0.1298 | 2026-11-09 | A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to | |
CVE-2021-20027 |
high | 7.5 | 0.0129 | 2026-11-09 | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of S | |
CVE-2026-19552 |
none | — | 0.0030 | 2026-11-09 | When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identit | |
CVE-2026-124636 |
medium | 5.1 | 0.0046 | 2026-11-09 | A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. The affected element | |
CVE-2026-101307 |
high | 8.2 | 0.0028 | 2026-11-09 | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counte |