Browse All CVEs
13,709 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-54079 |
high | 8.7 | 0.0056 | 2026-10-29 | veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata r | |
CVE-2026-18255 |
high | 7.2 | 0.0077 | 2026-10-29 | A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view | |
CVE-2026-54574 |
high | 8.2 | 0.0021 | 2026-10-29 | proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-dis | |
CVE-2026-54727 |
high | 8.2 | 0.0019 | 2026-10-29 | proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-dis | |
CVE-2026-8339 |
high | 8.7 | 0.0034 | 2026-10-29 | A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between | |
CVE-2026-40272 |
high | 7.0 | 0.0016 | 2026-10-29 | Improper Input Validation in the decode() function of the traceparser library could allow | |
CVE-2026-8497 |
high | 7.4 | 0.0013 | 2026-10-29 | Improper certificate validation in the Devolutions Server connection handling in Devolutio | |
CVE-2026-12935 |
high | 8.7 | 0.0099 | 2026-10-29 | The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module th | |
CVE-2026-16328 |
high | 8.6 | 0.0039 | 2026-10-29 | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend a | |
CVE-2026-2482 |
high | 8.8 | 0.0015 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cros | |
CVE-2026-67201 |
high | 7.7 | 0.0053 | 2026-10-29 | V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) by | |
CVE-2026-67424 |
high | 8.5 | 0.0029 | 2026-10-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, | |
CVE-2026-67425 |
high | 8.6 | 0.0041 | 2026-10-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, | |
CVE-2026-67427 |
high | 8.6 | 0.0045 | 2026-10-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, | |
CVE-2026-67428 |
high | 8.5 | 0.0041 | 2026-10-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, | |
CVE-2026-12357 |
high | 7.2 | 0.0109 | 2026-10-29 | Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vuln | |
CVE-2026-13268 |
high | 7.8 | 0.0020 | 2026-10-29 | G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerabili | |
CVE-2026-5057 |
high | 7.5 | 0.0074 | 2026-10-29 | ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulne | |
CVE-2026-67431 |
high | 8.3 | 0.0036 | 2026-10-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prio | |
CVE-2026-67432 |
high | 7.5 | 0.0078 | 2026-10-29 | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prio | |
CVE-2026-67436 |
high | 8.3 | 0.0042 | 2026-10-29 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and | |
CVE-2026-6102 |
high | 7.8 | 0.0012 | 2026-10-29 | MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. T | |
CVE-2026-13308 |
high | 8.1 | 0.0078 | 2026-10-29 | Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnera | |
CVE-2026-17650 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-17653 |
high | 8.3 | 0.0049 | 2026-10-29 | Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker w | |
CVE-2026-17654 |
high | 7.8 | 0.0010 | 2026-10-29 | Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to | |
CVE-2026-17657 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-17658 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-17660 |
high | 8.3 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922 | |
CVE-2026-17661 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17663 |
high | 8.3 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151 | |
CVE-2026-17665 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-17677 |
high | 8.8 | 0.0048 | 2026-10-29 | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 a | |
CVE-2026-17678 |
high | 8.8 | 0.0051 | 2026-10-29 | Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17685 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17686 |
high | 8.1 | 0.0033 | 2026-10-29 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.79 | |
CVE-2026-17694 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-17698 |
high | 7.5 | 0.0027 | 2026-10-29 | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151. | |
CVE-2026-17699 |
high | 8.6 | 0.0014 | 2026-10-29 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker t | |
CVE-2026-17705 |
high | 8.8 | 0.0041 | 2026-10-29 | Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17712 |
high | 8.8 | 0.0045 | 2026-10-29 | Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to e | |
CVE-2026-17716 |
high | 8.4 | 0.0014 | 2026-10-29 | Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local a | |
CVE-2026-17719 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17722 |
high | 8.3 | 0.0030 | 2026-10-29 | Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allow | |
CVE-2026-17723 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17725 |
high | 8.8 | 0.0045 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-17729 |
high | 8.8 | 0.0037 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who | |
CVE-2026-17735 |
high | 8.7 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922 | |
CVE-2026-17741 |
high | 7.1 | 0.0022 | 2026-10-29 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to | |
CVE-2026-17744 |
high | 7.1 | 0.0021 | 2026-10-29 | Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.7 |