Browse All CVEs
13,741 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18084 |
high | 8.6 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UE | |
CVE-2026-54603 |
high | 8.6 | 0.0045 | 2026-10-29 | OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including Ope | |
CVE-2026-54605 |
high | 7.2 | 0.0019 | 2026-10-29 | OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and server | |
CVE-2026-54609 |
high | 8.6 | 0.0046 | 2026-10-29 | QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In ver | |
CVE-2026-67183 |
high | 8.7 | 0.0051 | 2026-10-29 | TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated att | |
CVE-2026-67184 |
high | 8.7 | 0.0061 | 2026-10-29 | TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauth | |
CVE-2026-67185 |
high | 8.7 | 0.0055 | 2026-10-29 | TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated | |
CVE-2026-48372 |
high | 7.8 | 0.0034 | 2026-10-29 | Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result | |
CVE-2026-48388 |
high | 8.6 | 0.0031 | 2026-10-29 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerabilit | |
CVE-2026-54635 |
high | 7.5 | 0.0051 | 2026-10-29 | pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access | |
CVE-2026-59931 |
high | 7.7 | 0.0047 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version | |
CVE-2026-59933 |
high | 7.5 | 0.0046 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version | |
CVE-2026-14869 |
high | 8.6 | 0.0039 | 2026-10-29 | The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forge | |
CVE-2026-16496 |
high | 8.9 | 0.0036 | 2026-10-29 | The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in | |
CVE-2026-16771 |
high | 8.8 | 0.0043 | 2026-10-29 | In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any | |
CVE-2026-47726 |
high | 7.1 | 0.0030 | 2026-10-29 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. | |
CVE-2026-48374 |
high | 7.8 | 0.0031 | 2026-10-29 | Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Pat | |
CVE-2026-48390 |
high | 8.2 | 0.0025 | 2026-10-29 | Bridge is affected by an Incorrect Authorization vulnerability that could result in privil | |
CVE-2026-48391 |
high | 8.2 | 0.0027 | 2026-10-29 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrar | |
CVE-2026-48392 |
high | 7.8 | 0.0026 | 2026-10-29 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary | |
CVE-2026-48393 |
high | 7.8 | 0.0026 | 2026-10-29 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary | |
CVE-2026-48394 |
high | 7.8 | 0.0026 | 2026-10-29 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary | |
CVE-2026-48395 |
high | 8.6 | 0.0029 | 2026-10-29 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrar | |
CVE-2026-48396 |
high | 8.6 | 0.0028 | 2026-10-29 | Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitr | |
CVE-2026-49258 |
high | 8.8 | 0.0048 | 2026-10-29 | Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3. | |
CVE-2026-50738 |
high | 7.7 | 0.0051 | 2026-10-29 | A use-after-free condition exists in pglogical's worker signaling code, where a worker str | |
CVE-2026-59932 |
high | 7.5 | 0.0046 | 2026-10-29 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version | |
CVE-2026-66745 |
high | 7.5 | 0.0055 | 2026-10-29 | Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a se | |
CVE-2026-48060 |
high | 8.1 | 0.0035 | 2026-10-29 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2. | |
CVE-2026-57510 |
high | 8.7 | 0.0062 | 2026-10-29 | SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the | |
CVE-2026-13442 |
high | 7.1 | 0.0029 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS | |
CVE-2026-13463 |
high | 7.5 | 0.0038 | 2026-10-29 | IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information | |
CVE-2026-14528 |
high | 7.5 | 0.0045 | 2026-10-29 | IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to | |
CVE-2026-14893 |
high | 7.3 | 0.0033 | 2026-10-29 | IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js t | |
CVE-2026-14958 |
high | 7.2 | 0.0082 | 2026-10-29 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to | |
CVE-2026-14959 |
high | 7.2 | 0.0155 | 2026-10-29 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to | |
CVE-2026-14996 |
high | 8.2 | 0.0034 | 2026-10-29 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to sessio | |
CVE-2026-15057 |
high | 7.5 | 0.0046 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a de | |
CVE-2026-15280 |
high | 7.5 | 0.0050 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Control | |
CVE-2026-54621 |
high | 7.8 | 0.0021 | 2026-10-29 | datamodel-code-generator generates Python data models from schema definitions. Prior to 0. | |
CVE-2026-54653 |
high | 8.8 | 0.0071 | 2026-10-29 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec | |
CVE-2026-54654 |
high | 7.8 | 0.0021 | 2026-10-29 | datamodel-code-generator generates Python data models from schema definitions. From 0.14.1 | |
CVE-2026-54655 |
high | 7.8 | 0.0021 | 2026-10-29 | datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 | |
CVE-2026-54656 |
high | 7.8 | 0.0025 | 2026-10-29 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec | |
CVE-2026-54690 |
high | 8.2 | 0.0039 | 2026-10-29 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec | |
CVE-2026-54691 |
high | 8.2 | 0.0026 | 2026-10-29 | datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 | |
CVE-2026-55389 |
high | 7.5 | 0.0055 | 2026-10-29 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec | |
CVE-2026-55390 |
high | 7.5 | 0.0055 | 2026-10-29 | datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 | |
CVE-2026-55391 |
high | 7.5 | 0.0031 | 2026-10-29 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec | |
CVE-2026-55415 |
high | 7.5 | 0.0049 | 2026-10-29 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec |