Browse All CVEs
3,510 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-114268 |
critical | 9.4 | 0.0051 | 2026-10-29 | A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the | |
CVE-2026-111809 |
critical | 9.3 | 0.0022 | 2026-10-29 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length | |
CVE-2026-111811 |
critical | 9.4 | 0.0036 | 2026-10-29 | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read | |
CVE-2026-112408 |
critical | 9.4 | 0.0074 | 2026-10-29 | Missing verification of source of a communication channel in the default_bucket() function | |
CVE-2026-114139 |
critical | 9.1 | 0.0051 | 2026-10-29 | Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10. | |
CVE-2026-96639 |
critical | 9.8 | 0.0066 | 2026-10-29 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can reta | |
CVE-2026-114382 |
critical | 10.0 | 0.0067 | 2026-10-29 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the functi | |
CVE-2026-114383 |
critical | 10.0 | 0.0065 | 2026-10-29 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function se | |
CVE-2026-114509 |
critical | 9.2 | 0.0078 | 2026-10-29 | 6 PoC | Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configure |
CVE-2026-91403 |
critical | 9.1 | 0.0037 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-94140 |
critical | 9.1 | 0.0025 | 2026-10-29 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync trans | |
CVE-2026-76299 |
critical | 9.9 | 0.0033 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76301 |
critical | 9.8 | 0.0038 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76302 |
critical | 9.9 | 0.0040 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76527 |
critical | 9.8 | 0.0043 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-76531 |
critical | 9.9 | 0.0041 | 2026-10-29 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-110264 |
critical | 10.0 | 0.0131 | 2026-10-29 | An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11. | |
CVE-2026-114575 |
critical | 10.0 | 0.0221 | 2026-10-29 | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is | |
CVE-2026-114661 |
critical | 9.0 | 0.0035 | 2026-10-29 | OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewaySe | |
CVE-2026-96355 |
critical | 9.1 | 0.0042 | 2026-10-29 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Dru | |
CVE-2026-114219 |
critical | 9.1 | 0.0034 | 2026-10-29 | NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unaut | |
CVE-2026-114220 |
critical | 9.3 | 0.0019 | 2026-10-29 | NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerabil | |
CVE-2026-112241 |
critical | 9.8 | 0.0046 | 2026-10-29 | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allo | |
CVE-2026-112327 |
critical | 9.3 | 0.0033 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2021-48014 |
critical | 9.3 | 0.0203 | 2026-10-29 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer desi | |
CVE-2021-48016 |
critical | 9.3 | 0.0044 | 2026-10-29 | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where | |
CVE-2026-112832 |
critical | 9.8 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-115324 |
critical | 9.2 | 0.0032 | 2026-10-29 | mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/da | |
CVE-2026-102785 |
critical | 10.0 | 0.0077 | 2026-10-29 | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5. | |
CVE-2026-111497 |
critical | 9.2 | 0.8264 | 2026-10-29 | KEV 74 PoC | Google Brotli contains an unchecked return value vulnerability that allows a remote unauth |
CVE-2026-78846 |
critical | 9.8 | 0.0045 | 2026-10-29 | Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location he | |
CVE-2026-114607 |
critical | 9.1 | 0.0042 | 2026-10-29 | Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta | |
CVE-2026-97631 |
critical | 9.5 | 0.0063 | 2026-10-29 | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classi | |
CVE-2026-70846 |
critical | 9.6 | 0.0036 | 2026-10-29 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Int | |
CVE-2026-70854 |
critical | 9.1 | 0.0045 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70855 |
critical | 9.3 | 0.0036 | 2026-10-29 | Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: H | |
CVE-2026-70862 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in Oracle Application Testing Suite. The supported version that is affecte | |
CVE-2026-70871 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70872 |
critical | 9.1 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70873 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70876 |
critical | 9.1 | 0.0049 | 2026-10-29 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70880 |
critical | 10.0 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70905 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: | |
CVE-2026-70920 |
critical | 9.9 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70921 |
critical | 10.0 | 0.0043 | 2026-10-29 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70926 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workfl | |
CVE-2026-70953 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynam | |
CVE-2026-70954 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynam | |
CVE-2026-70958 |
critical | 9.6 | 0.0042 | 2026-10-29 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion | |
CVE-2026-70970 |
critical | 9.8 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen |