Browse All CVEs
13,586 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70557 |
high | 7.1 | 0.0039 | 2026-10-29 | diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names | |
CVE-2026-70559 |
high | 8.7 | 0.0045 | 2026-10-29 | Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a metho | |
CVE-2026-70633 |
high | 7.1 | 0.0051 | 2026-10-29 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulner | |
CVE-2026-70634 |
high | 7.2 | 0.0053 | 2026-10-29 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the | |
CVE-2026-70635 |
high | 7.1 | 0.0044 | 2026-10-29 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulner | |
CVE-2026-70636 |
high | 8.7 | 0.0066 | 2026-10-29 | Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthen | |
CVE-2026-70638 |
high | 8.5 | 0.0023 | 2026-10-29 | 1 PoC | llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaM |
CVE-2026-70640 |
high | 7.3 | 0.0024 | 2026-10-29 | llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability | |
CVE-2026-71445 |
high | 8.2 | 0.0040 | 2026-10-29 | AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tag | |
CVE-2026-71476 |
high | 8.7 | 0.0086 | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until | |
CVE-2026-71488 |
high | 7.5 | 0.0063 | 2026-10-29 | league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6 | |
CVE-2026-7406 |
high | 7.8 | 0.0019 | 2026-10-29 | A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a | |
CVE-2026-8325 |
high | 7.8 | 0.0019 | 2026-10-29 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bo | |
CVE-2026-49163 |
high | 8.8 | 0.0102 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Applicat | |
CVE-2026-62836 |
high | 8.7 | 0.0065 | 2026-10-29 | Improper restriction of communication channel to intended endpoints in Azure SQL Managed I | |
CVE-2026-62918 |
high | 7.5 | 0.0050 | 2026-10-29 | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized | |
CVE-2026-65668 |
high | 8.8 | 0.0078 | 2026-10-29 | Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to e | |
CVE-2026-19189 |
high | 7.1 | 0.0016 | 2026-10-29 | A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this is | |
CVE-2026-45198 |
high | 7.8 | 0.0018 | 2026-10-29 | Kernel software from a non-secure operating system on a platform with Trusted Execution En | |
CVE-2026-49746 |
high | 7.1 | 0.0015 | 2026-10-29 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-19190 |
high | 7.1 | 0.0016 | 2026-10-29 | A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown p | |
CVE-2026-19191 |
high | 7.1 | 0.0016 | 2026-10-29 | A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulner | |
CVE-2026-19192 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some un | |
CVE-2026-19193 |
high | 7.1 | 0.0016 | 2026-10-29 | A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCall | |
CVE-2026-19195 |
high | 7.1 | 0.0016 | 2026-10-29 | A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected elemen | |
CVE-2026-49007 |
high | 7.5 | 0.0043 | 2026-10-29 | By accessing unencrypted information in the device firmware, an attacker can obtain the in | |
CVE-2026-66491 |
high | 8.2 | 0.0047 | 2026-10-29 | Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Imprope | |
CVE-2026-9169 |
high | 8.8 | 0.0017 | 2026-10-29 | DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a lo | |
CVE-2026-12070 |
high | 8.4 | 0.0040 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vul | |
CVE-2026-54200 |
high | 8.4 | 0.0040 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerab | |
CVE-2026-54202 |
high | 8.5 | 0.0045 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability | |
CVE-2026-54204 |
high | 7.7 | 0.0057 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” | |
CVE-2026-54208 |
high | 8.5 | 0.0052 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write | |
CVE-2026-54209 |
high | 8.9 | 0.0041 | 2026-10-29 | Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a func | |
CVE-2026-54218 |
high | 8.8 | 0.0046 | 2026-10-29 | Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Web | |
CVE-2026-71559 |
high | 7.5 | 0.0080 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory al | |
CVE-2026-15816 |
high | 7.5 | 0.0037 | 2026-10-29 | A flaw was found in dracut. The die() error-handling function writes its message into a sh | |
CVE-2026-66494 |
high | 8.7 | 0.0050 | 2026-10-29 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP P | |
CVE-2026-15570 |
high | 7.1 | 0.0026 | 2026-10-29 | An improper restriction of URL schemes and destinations in the SmartCenter browserseturl c | |
CVE-2026-18497 |
high | 7.1 | 0.0018 | 2026-10-29 | A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to ve | |
CVE-2026-17600 |
high | 8.7 | 0.0044 | 2026-10-29 | Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or | |
CVE-2026-17601 |
high | 8.9 | 0.0052 | 2026-10-29 | A user holding a permission to update privilege definitions could modify a wildcard privil | |
CVE-2026-17603 |
high | 8.7 | 0.0087 | 2026-10-29 | Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties | |
CVE-2026-20337 |
high | 7.5 | 0.0060 | 2026-10-29 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote | |
CVE-2026-20338 |
high | 7.5 | 0.0056 | 2026-10-29 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote | |
CVE-2026-20339 |
high | 7.5 | 0.0056 | 2026-10-29 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, | |
CVE-2026-20345 |
high | 7.5 | 0.0056 | 2026-10-29 | A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, re | |
CVE-2026-20346 |
high | 7.5 | 0.0054 | 2026-10-29 | A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, re | |
CVE-2026-20347 |
high | 7.5 | 0.0056 | 2026-10-29 | A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, | |
CVE-2026-20348 |
high | 7.5 | 0.0072 | 2026-10-29 | A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, re |