Browse All CVEs
10,432 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-0140 |
medium | 4.3 | 0.0018 | 2026-10-29 | In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overf | |
CVE-2026-0141 |
medium | 5.3 | 0.0021 | 2026-10-29 | In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bou | |
CVE-2026-0142 |
medium | 4.0 | 0.0007 | 2026-10-29 | In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to imprope | |
CVE-2026-0145 |
medium | 4.0 | 0.0008 | 2026-10-29 | In keymint, there is a possible Permission Bypass due to a logic error in the code. This c | |
CVE-2026-0155 |
medium | 5.3 | 0.0018 | 2026-10-29 | In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds | |
CVE-2026-0157 |
medium | 4.3 | 0.0017 | 2026-10-29 | In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds chec | |
CVE-2026-0158 |
medium | 4.0 | 0.0007 | 2026-10-29 | In Camera, there is a possible unauthorized way to access photos due to a missing permissi | |
CVE-2026-0165 |
medium | 6.5 | 0.0018 | 2026-10-29 | In several functions of the RTCP packet decoder, there is a possible out-of-bounds read du | |
CVE-2026-11890 |
medium | 4.3 | 0.0023 | 2026-10-29 | Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, | |
CVE-2026-12105 |
medium | 6.5 | 0.0030 | 2026-10-29 | Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated | |
CVE-2026-12117 |
medium | 4.3 | 0.0026 | 2026-10-29 | Improper access control in the social login connection endpoint in Devolutions Server 202 | |
CVE-2026-12425 |
medium | 5.7 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' | |
CVE-2026-35261 |
medium | 6.5 | 0.0027 | 2026-10-29 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: | |
CVE-2026-35291 |
medium | 6.6 | 0.0035 | 2026-10-29 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Conso | |
CVE-2026-46768 |
medium | 6.0 | 0.0015 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMS | |
CVE-2026-46770 |
medium | 6.1 | 0.0023 | 2026-10-29 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusi | |
CVE-2026-46771 |
medium | 4.1 | 0.0014 | 2026-10-29 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusi | |
CVE-2026-46772 |
medium | 4.7 | 0.0013 | 2026-10-29 | Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusi | |
CVE-2026-46790 |
medium | 5.3 | 0.0034 | 2026-10-29 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (compone | |
CVE-2026-46810 |
medium | 6.5 | 0.0027 | 2026-10-29 | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End | |
CVE-2026-46812 |
medium | 6.1 | 0.0024 | 2026-10-29 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: | |
CVE-2026-46825 |
medium | 6.0 | 0.0016 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMS | |
CVE-2026-46869 |
medium | 6.5 | 0.0018 | 2026-10-29 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Dump and Load) | |
CVE-2026-46871 |
medium | 6.5 | 0.0026 | 2026-10-29 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). | |
CVE-2026-46877 |
medium | 6.0 | 0.0017 | 2026-10-29 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMS | |
CVE-2026-46979 |
medium | 6.5 | 0.0029 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSof | |
CVE-2024-24709 |
medium | 4.3 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Shareaholic allows Exploiting Incorrectly Configure | |
CVE-2026-12444 |
medium | 5.5 | 0.0014 | 2026-10-29 | Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allow | |
CVE-2026-12446 |
medium | 4.3 | 0.0019 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed | |
CVE-2026-12450 |
medium | 6.5 | 0.0018 | 2026-10-29 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a r | |
CVE-2026-12453 |
medium | 4.2 | 0.0018 | 2026-10-29 | Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.1 | |
CVE-2026-12456 |
medium | 4.2 | 0.0014 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowe | |
CVE-2026-12457 |
medium | 4.2 | 0.0014 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowe | |
CVE-2026-12459 |
medium | 6.1 | 0.0018 | 2026-10-29 | Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a | |
CVE-2026-12460 |
medium | 4.2 | 0.0015 | 2026-10-29 | Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827 | |
CVE-2026-12461 |
medium | 6.5 | 0.0024 | 2026-10-29 | Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a | |
CVE-2026-12463 |
medium | 4.7 | 0.0013 | 2026-10-29 | Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.155 al | |
CVE-2026-12469 |
medium | 4.3 | 0.0019 | 2026-10-29 | Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a rem | |
CVE-2026-24575 |
medium | 4.3 | 0.0026 | 2026-10-29 | Subscriber Broken Access Control in WishList Member X <= 3.29.0 versions. | |
CVE-2026-24610 |
medium | 4.3 | 0.0024 | 2026-10-29 | Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions. | |
CVE-2026-27410 |
medium | 6.5 | 0.0027 | 2026-10-29 | Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions. | |
CVE-2026-27868 |
medium | 6.9 | 0.0039 | 2026-10-29 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in | |
CVE-2026-27869 |
medium | 6.9 | 0.0039 | 2026-10-29 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in | |
CVE-2026-27870 |
medium | 4.8 | 0.0029 | 2026-10-29 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in | |
CVE-2026-39433 |
medium | 6.5 | 0.0035 | 2026-10-29 | Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions. | |
CVE-2026-39577 |
medium | 5.5 | 0.0021 | 2026-10-29 | Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions. | |
CVE-2026-39578 |
medium | 5.5 | 0.0027 | 2026-10-29 | Unauthenticated PHP Object Injection in Valiance <= 1.2 versions. | |
CVE-2026-39595 |
medium | 4.7 | 0.0021 | 2026-10-29 | Author Broken Access Control in W3 Total Cache <= 2.9.1 versions. | |
CVE-2026-40722 |
medium | 5.5 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorr | |
CVE-2026-40723 |
medium | 4.3 | 0.0024 | 2026-10-29 | Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions. |