Browse All CVEs
13,674 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-17948 |
high | 7.5 | 0.0027 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convi | |
CVE-2026-17950 |
high | 8.8 | 0.0037 | 2026-10-29 | Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.7 | |
CVE-2026-17951 |
high | 8.8 | 0.0037 | 2026-10-29 | Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote at | |
CVE-2026-17952 |
high | 7.5 | 0.0026 | 2026-10-29 | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an atta | |
CVE-2026-17956 |
high | 8.8 | 0.0040 | 2026-10-29 | Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17967 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a | |
CVE-2026-17969 |
high | 8.8 | 0.0040 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17971 |
high | 8.8 | 0.0037 | 2026-10-29 | Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a re | |
CVE-2026-17979 |
high | 7.5 | 0.0029 | 2026-10-29 | Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar | |
CVE-2026-17989 |
high | 8.8 | 0.0045 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-17993 |
high | 7.0 | 0.0009 | 2026-10-29 | Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacke | |
CVE-2026-17995 |
high | 8.1 | 0.0033 | 2026-10-29 | Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-18012 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-18017 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker t | |
CVE-2026-15929 |
high | 7.1 | 0.0027 | 2026-10-29 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-16727 |
high | 7.3 | 0.0012 | 2026-10-29 | Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition” | |
CVE-2026-18186 |
high | 7.1 | 0.0046 | 2026-10-29 | A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerabi | |
CVE-2026-18187 |
high | 7.1 | 0.0046 | 2026-10-29 | A format string vulnerability was found in the Internal Backup on the ADM. The vulnerabili | |
CVE-2026-18188 |
high | 7.1 | 0.0046 | 2026-10-29 | A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability | |
CVE-2026-48448 |
high | 8.6 | 0.0056 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements | |
CVE-2026-67244 |
high | 8.6 | 0.0050 | 2026-10-29 | A format string vulnerability was found in the Notification OAuth settings of ADM. The vul | |
CVE-2026-67245 |
high | 7.0 | 0.0033 | 2026-10-29 | A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability | |
CVE-2026-67247 |
high | 7.1 | 0.0045 | 2026-10-29 | A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability | |
CVE-2026-67248 |
high | 8.7 | 0.0049 | 2026-10-29 | A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The | |
CVE-2026-47873 |
high | 8.0 | 0.0029 | 2026-10-29 | The Boot Dashboard Docker integration in Spring Tools publishes container control ports on | |
CVE-2026-47882 |
high | 8.3 | 0.0024 | 2026-10-29 | When enabling Spring Boot DevTools support for a remote application target (for example a | |
CVE-2026-58043 |
high | 8.4 | 0.0014 | 2026-10-29 | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across rad | |
CVE-2026-44093 |
high | 8.5 | 0.0019 | 2026-10-29 | A local privilege escalation vulnerability in the init-script for user-applications allows | |
CVE-2026-44106 |
high | 8.5 | 0.0019 | 2026-10-29 | A privilege escalation vulnerability in the init-script for user-applications allows a low | |
CVE-2026-18353 |
high | 8.8 | 0.0030 | 2026-10-29 | PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** ` | |
CVE-2026-16969 |
high | 7.6 | 0.0021 | 2026-10-29 | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cro | |
CVE-2026-18360 |
high | 7.6 | 0.0028 | 2026-10-29 | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cro | |
CVE-2026-18361 |
high | 7.6 | 0.0021 | 2026-10-29 | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cro | |
CVE-2026-22620 |
high | 8.6 | 0.0066 | 2026-10-29 | Improper input validation in the authentication component of Eaton's Tripp Lite series PAD | |
CVE-2026-22621 |
high | 8.3 | 0.0058 | 2026-10-29 | Improper input validation in one of the session management interface of Eaton's Tripp Lite | |
CVE-2026-22622 |
high | 8.8 | 0.0055 | 2026-10-29 | Improper input validation in one of the session management interface of Eaton's Tripp Lite | |
CVE-2026-17543 |
high | 8.1 | 0.0033 | 2026-10-29 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial S | |
CVE-2026-17544 |
high | 8.1 | 0.0042 | 2026-10-29 | Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and h | |
CVE-2026-18381 |
high | 7.6 | 0.0038 | 2026-10-29 | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostMa | |
CVE-2026-54365 |
high | 8.7 | 0.0037 | 2026-10-29 | CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNam | |
CVE-2026-54367 |
high | 8.8 | 0.0032 | 2026-10-29 | CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauth | |
CVE-2026-54368 |
high | 8.7 | 0.0071 | 2026-10-29 | CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() a | |
CVE-2026-12722 |
high | 8.2 | 0.0044 | 2026-10-29 | Missing authentication for critical function vulnerability in FTC Software IT Services FTC | |
CVE-2026-56428 |
high | 8.1 | 0.0048 | 2026-10-29 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vuln | |
CVE-2026-57859 |
high | 7.7 | 0.0051 | 2026-10-29 | e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deseria | |
CVE-2026-5219 |
high | 8.3 | 0.0018 | 2026-10-29 | Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd | |
CVE-2026-60074 |
high | 7.5 | 0.0063 | 2026-10-29 | Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal di | |
CVE-2026-60075 |
high | 7.5 | 0.0037 | 2026-10-29 | Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking | |
CVE-2026-67351 |
high | 8.7 | 0.0056 | 2026-10-29 | Serendipity before 2.6.1 contains an authentication context confusion vulnerability where | |
CVE-2026-11897 |
high | 7.5 | 0.0053 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a de |