Browse All CVEs
13,615 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18685 |
high | 8.9 | 0.0362 | 2026-10-29 | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is t | |
CVE-2026-18686 |
high | 8.9 | 0.0473 | 2026-10-29 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the | |
CVE-2026-65802 |
high | 7.4 | 0.0092 | 2026-10-29 | External control of file name or path in Microsoft Edge for Android allows an unauthorized | |
CVE-2026-66310 |
high | 7.7 | 0.0036 | 2026-10-29 | External control of file name or path in Microsoft Edge for Android allows an unauthorized | |
CVE-2026-66315 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-66318 |
high | 8.1 | 0.0036 | 2026-10-29 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-66321 |
high | 7.4 | 0.0107 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-66322 |
high | 7.1 | 0.0023 | 2026-10-29 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-56846 |
high | 7.5 | 0.0050 | 2026-10-29 | A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSession | |
CVE-2026-6837 |
high | 7.2 | 0.0152 | 2026-10-29 | A post-authentication command injection vulnerability in the "export-cgi" CGI program in Z | |
CVE-2026-16881 |
high | 8.7 | 0.0044 | 2026-10-29 | A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. T | |
CVE-2026-18755 |
high | 7.3 | 0.0019 | 2026-10-29 | A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write | |
CVE-2026-67243 |
high | 8.6 | 0.0054 | 2026-10-29 | freo2 provided by refirio contains an unrestricted upload of file with dangerous type vuln | |
CVE-2026-14838 |
high | 7.4 | 0.0034 | 2026-10-29 | Use of GET request method with sensitive query strings vulnerability in Bilin Software and | |
CVE-2026-10709 |
high | 7.8 | 0.0021 | 2026-10-29 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack- | |
CVE-2026-10710 |
high | 7.8 | 0.0021 | 2026-10-29 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack- | |
CVE-2026-18806 |
high | 7.1 | 0.0015 | 2026-10-29 | External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologie | |
CVE-2026-58080 |
high | 8.8 | 0.0038 | 2026-10-29 | In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve | |
CVE-2026-62927 |
high | 8.7 | 0.0042 | 2026-10-29 | In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mix | |
CVE-2026-63252 |
high | 8.7 | 0.0058 | 2026-10-29 | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to relea | |
CVE-2026-17070 |
high | 8.8 | 0.0042 | 2026-10-29 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functional | |
CVE-2026-18650 |
high | 8.8 | 0.0042 | 2026-10-29 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation | |
CVE-2026-67195 |
high | 8.7 | 0.0119 | 2026-10-29 | Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticat | |
CVE-2026-67198 |
high | 8.7 | 0.0029 | 2026-10-29 | Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol | |
CVE-2026-67199 |
high | 7.1 | 0.0052 | 2026-10-29 | Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers | |
CVE-2026-67200 |
high | 8.7 | 0.0085 | 2026-10-29 | Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remo | |
CVE-2026-67618 |
high | 7.1 | 0.0029 | 2026-10-29 | marimo before 0.23.15 contains a configuration injection vulnerability that allows noteboo | |
CVE-2026-68494 |
high | 8.7 | 0.0046 | 2026-10-29 | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq | |
CVE-2026-69250 |
high | 8.5 | 0.0057 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-21366 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory corruption while processing a packet with a size close to the maximum allowed value | |
CVE-2026-24079 |
high | 8.1 | 0.0021 | 2026-10-29 | Cryptographic Issue while processing registration requests with malformed or missing authe | |
CVE-2026-24080 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption when handling malformed request parameters in the fingerprint TA. | |
CVE-2026-24083 |
high | 7.8 | 0.0010 | 2026-10-29 | Memory Corruption while processing IOCTL device driver requests with invalid arguments. | |
CVE-2026-24084 |
high | 7.5 | 0.0025 | 2026-10-29 | Weak configuration when UE does not verify the consistency of its additional security capa | |
CVE-2026-25288 |
high | 7.4 | 0.0016 | 2026-10-29 | Transient DOS when processing a short target wake time channel usage response frame with i | |
CVE-2026-25292 |
high | 7.6 | 0.0015 | 2026-10-29 | Memory Corruption when processing untrusted user input in the fastboot command handler for | |
CVE-2026-69100 |
high | 8.7 | 0.0102 | 2026-10-29 | LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote | |
CVE-2026-69252 |
high | 7.2 | 0.0054 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-15307 |
high | 8.7 | 0.0113 | 2026-10-29 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatia | |
CVE-2026-15314 |
high | 7.1 | 0.0076 | 2026-10-29 | Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in th | |
CVE-2026-18787 |
high | 7.4 | 0.0321 | 2026-10-29 | A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the | |
CVE-2026-56848 |
high | 7.5 | 0.0052 | 2026-10-29 | A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entr | |
CVE-2026-58067 |
high | 8.7 | 0.0045 | 2026-10-29 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to | |
CVE-2026-58071 |
high | 8.2 | 0.0042 | 2026-10-29 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to | |
CVE-2026-58074 |
high | 8.6 | 0.0053 | 2026-10-29 | A vulnerability allowing a high-privileged user to execute arbitrary code on the server. | |
CVE-2026-58075 |
high | 8.7 | 0.0042 | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host | |
CVE-2026-64631 |
high | 8.6 | 0.0040 | 2026-10-29 | A vulnerability allowing a low-privileged user to inject SQL and extract database contents | |
CVE-2026-64634 |
high | 8.4 | 0.0015 | 2026-10-29 | A vulnerability allowing local privilege escalation to the Reporter service context. | |
CVE-2026-69257 |
high | 7.6 | 0.0043 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-69258 |
high | 8.8 | 0.0067 | 2026-10-29 | Flowise is a drag & drop user interface to build a customized large language model flow. P |